How Hackers Can Breach CI/CD Systems - Security Vulnerabilities and Mitigation
Explore vulnerabilities in CI/CD systems, including IDE leaks, role granularity issues, and environment leaks. Learn exploitation techniques and mitigation strategies through live demos and practical examples.
Descubriendo Tesoros Ocultos en el Mundo Java - Ekoparty 2023
Explora técnicas avanzadas de reconocimiento, detección y explotación de vulnerabilidades en Java, incluyendo una herramienta integral para automatizar procesos y mejorar la seguridad.
Ingeniería de Datos para la Salud Mental con Calabaza_bot - Charla de Sergio Sanchez
Descubre cómo crear un bot de Telegram para seguimiento de salud mental usando tecnologías open source. Aprende a integrar herramientas como AWS, OpenAI Whisper y dbt para análisis de bienestar personal.
Como Configurar las Variables de Entorno de tu Aplicación ML
Configura variables de entorno para ML en local, Docker, CI/CD y diferentes entornos. Aprende a establecer el path de tu aplicación.
Software Security: Keeping Pace with Rapid Development
Explore strategies for scaling software security assurance to match rapid development, addressing vulnerabilities, and maintaining effectiveness in fast-paced delivery environments.
Practical DevSecOps - Creating a Simple Free Pipeline - 2018
Create a free DevSecOps pipeline using IAST and RASP for real-time vulnerability detection, attack prevention, and seamless integration into existing development workflows, enhancing security across the software lifecycle.
Policy Compliance with Sigstore - From Signing Software to Validating the Whole Software Supply Chain
Explore sigstore for software signing and verification, and learn how to implement policy compliance in cloud-native software build and deployment processes using automation and tools.
Farming Together: Building Open-Source Board Farms for Continuous Integration
Explore board farm challenges and solutions for continuous integration in embedded systems. Discuss harmonizing efforts to create an open-source platform for automated testing and remote development.
Application Security for DevSecOps - Don't Learn, Don't See, Don't Run
Explore the future of DevSecOps with insights on seamless security integration, emerging technologies, and adoption strategies for the next three years in application development.
Rise of the Machines: Automating Application Security Assessments - AppSec EU 2017
Explore automated security assessment techniques using Jenkins, HP Fortify, OWASP ZAP, and more. Learn how to efficiently scan and report vulnerabilities across diverse applications and platforms.
Changed Responsibilities in Modern Development Practices
Explore how modern development practices like CI/CD and DevOps impact application security. Learn strategies for integrating security early in the development lifecycle and empowering developers with essential security skills.
Don't Worry, Be API - Addressing AppSec's Modern Challenge
Explore modern API security challenges and solutions, including OWASP API Security Top 10, authentication issues, and authorization vulnerabilities in this comprehensive overview.
Taking AppSec to 11: Pipelines, DevOps and Making Things Better
Scaling AppSec through DevOps: Learn strategies to enhance application security programs using pipelines, automation, and iterative improvements for large-scale organizations.
AppSec++ - Taking the Best of Agile, DevOps, and CI/CD into Your AppSec Program
Learn to optimize AppSec using Agile, DevOps, and CI/CD principles. Discover strategies for scaling security efforts, leveraging automation, and implementing open-source tools to enhance your application security program.
Gitsign - Keyless Git Commit Signing
Explore Gitsign, a Sigstore project enabling keyless Git commit signing. Learn its functionality, integration with Sigstore, and application in development, CI/CD, and GitOps workflows.
Road to SLSA3 - Non-falsifiable Provenance in Tekton with SPIFFE/SPIRE
Explore non-falsifiable provenance in Tekton using SPIFFE/SPIRE, enhancing software supply chain security and achieving SLSA3 compliance.
Fight Back Against Cyber Risk in the Software Supply Chain - Secure DevSecOps Pipeline for Regulated Environments
Secure DevSecOps pipelines for regulated environments: best practices, open-source tools, and real-world application in banking using BIAN framework and technologies like Tekton, Terraform, and SonarQube.
Filling the Gaps in Kubernetes Flavored SLSA with Threat Modeling
Explore threat modeling for Kubernetes CI/CD security using SLSA standards. Learn to identify and mitigate vulnerabilities in supply chain processes, with practical insights from Tekton's implementation.
Securing Open Source Software Supply Chain - Continuous Secure Software Ingestion
Explore secure OSS ingestion in enterprises using Continuous Secure Software Ingestion (CSSI) application, built on Tekton & Open Policy Agent, for automated artifact grooming and policy-driven security checks.
Secure CI/CD Using JSON Web Token (JWT)
Explore how GitLab leverages JWT for secure access to secret management solutions, enhancing DevSecOps practices and addressing challenges in retrieving sensitive data across cloud providers.
Achieving End-to-End Software Supply Chain Security with in-toto
Explore in-toto's advancements in software supply chain security, including artifact tracking, attestation types, and integrations with CNCF projects for cloud-native identity protection.