SBOMs: Zero to Hero - A Comprehensive Guide
Discover SBOMs: definition, importance, contents, creation methods, and open-source tools. Explore integration challenges and solutions in build processes.
SLSA - A Supply Chain Security Framework
Explore SLSA framework for securing software supply chains, mitigating vulnerabilities, and ensuring code integrity from development to deployment.
Exploiting AI-Generated Code Vulnerabilities and Their Solutions
Discover vulnerabilities in AI-generated code and learn how to exploit and fix them. Gain insights into potential security risks and implement effective solutions using Snyk.
Growing a Greener Partnership: How Platform.sh and Nestlé Boosted Innovation While Reducing Carbon Footprint
Discover how Platform.sh and Nestlé collaborate to reduce digital carbon footprint while enhancing innovation. Learn strategies for measuring, lowering, and mitigating emissions in application lifecycles.
Impersonation in Data Engineering: No More Credentials in Your Code
Discover how to streamline data engineering workflows using IAM, Workload Identity, and impersonation. Eliminate credential hassles, improve security, and boost productivity in your development process.
Keep Your Dependencies in Check
Explore tools and strategies for efficiently managing and updating dependencies to enhance application security and maintain business value delivery.
DevSecOps by Default: Lessons from Log4Shell - What We Have, Can, and Must Learn
Explore DevSecOps strategies post-Log4Shell, focusing on strengthening software supply chains, vulnerability detection, and implementing "Secure by Default" policies using open-source tools.
Testing Your Yocto Project - From Ptest and Testimage to LAVA
Explore Yocto Project testing options, from simple setups using testimage and ptest to complex frameworks like LAVA. Learn integration techniques and alternatives for various project scales.
Building Privacy Aware Infrastructure
Explore privacy-focused infrastructure design, understanding regulations, core principles, and practical measures for implementing privacy-aware systems in platform engineering.
Developer Security Essentials
Discover how attackers exploit code vulnerabilities and learn to identify and fix complex security issues efficiently. Participate in a hands-on hacking session to address open source security problems.
Codifying Privacy: How to Follow Through On Your Privacy Promises
Learn practical approaches to implement privacy promises in software development, focusing on embedding privacy in CI/CD pipelines and overcoming common hurdles to ensure data handling aligns with user-facing policies.
Confessions of a Vulnerable Developer: What Developers Need to Know About Security
Explore security basics for developers, learn about free open-source tools, and gain practical knowledge to code confidently while improving software security.
Look Ma, No Secrets - Establishing Trust Between Workloads with SPIFFE and SPIRE
Explore SPIFFE and SPIRE for establishing trust between workloads in complex cloud environments without pre-shared secrets, enhancing security and productivity.
DevSecOps: More Than Just Pipelines
Explore DevSecOps beyond pipelines, covering key concepts, application security, and practical strategies for integrating security into the development lifecycle.
The Transformation of DevOps and InfoSec in AIoT
Explore the convergence of AI, IoT, DevOps, and InfoSec in AIoT, examining transformations, challenges, and security implications for modern tech landscapes.
Build Your Smart Robot with AWS IoT
Explore AWS IoT for smart robot development. Learn about data-driven optimization, edge ML, remote control, simulation, and interoperability. Discover real-world applications and CI/CD pipelines for robotics.
Virtual-Physical Environment Manipulation System Based on ROS - Python and Three.js Integration
Explore ROS-based virtual-physical environment manipulation using Python, Three.js, and WebRTC. Learn architecture, tools, and implementation for interactive 3D visualizations and robotic control.
Adding Security for Reliable Continuous Delivery
Enhance security in continuous delivery: Learn containerization challenges, vulnerabilities, misconfigurations, supply chain attacks, and IAM. Explore solutions and see a practical demo.
Who Secures Our Code When an Army of Robots Is Writing It? - DevOps Security Challenges in AI-Driven Development
Explore challenges and solutions for securing AI-generated code, including paved roads, runtime protection, and security tool copilots. Learn about CodeModder, an open-source library for modern code modification.
Security Concerns in Every Stage of the Software Supply Chain
Explore security concerns throughout the software supply chain, from development to deployment. Learn strategies to mitigate risks and enhance overall security posture in DevOps practices.
Accelerate Local Development on Kubernetes Using Telepresence
Accelerate local Kubernetes development with Telepresence, a CNCF proxying tool. Maintain a fast feedback loop while building microservices, enabling quick code changes and immediate impact visualization.