DevSecOps Transformation at Speed and Scale Using Tekton
Standardize CI/CD security automation, centralize platform operations, and prevent software vulnerabilities using Tekton as an open-source orchestrator with integrated scanning tools and continuous compliance.
Horusec - Security and Vulnerability Integration with CI/CD Pipelines and SonarQube
Explore Horusec integration with CICD pipelines and Sonarqube for enhanced security and vulnerability checks in software development.
Building Application Security With 0 Money Down - DefCamp - 2018
Discover cost-effective strategies for building robust application security. Learn about threat modeling, inception checklists, and maturity goals to enhance your cybersecurity practices without breaking the bank.
Interact Differently - Get More from Your Tools Through Exposed APIs
Explore how to leverage exposed APIs and plugin interfaces in software tools to enhance functionality, streamline workflows, and create custom solutions for improved efficiency and effectiveness.
The Silence of the Lambs - Inspecting Source Code and Binaries
Explore DevOps tools for inspecting Java source code and Docker images in Continuous Delivery pipelines, focusing on security and quality gates with SonarQube and Twistlock.
The ThreadFix Ecosystem - Vendors, Volunteers, and Versions
Explore ThreadFix: an open-source system for managing app vulnerabilities, automating security tasks, and integrating tools. Learn about its components, ecosystem, and real-world case studies of platform improvements.
Managing the Code Quality of Your Project - Leave the Past Behind - Focus on New Code
Explore the "Clean as you code" approach for managing code quality in legacy projects, focusing on recent changes to improve deliverables incrementally while maintaining productivity.
Inside the New Team Build
Explore Microsoft's rebuilt cross-platform build system, its customization options, and integration capabilities for various programming languages and tools like SonarQube.
Единый подход к CI/CD Store - Создание универсального фреймворка для DevOps
Discover how to implement a unified CI/CD framework using GitLab templates, enabling streamlined pipeline creation with Vault integration, artifact management, and deployment automation for multiple technology stacks.
Automating a Secure GitOps Workflow with Multi-Tenant SonarQube and Dependency Track on Kubernetes
Streamline platform engineering with automated code quality and security checks using SonarQube and Dependency Track on Kubernetes. Implement multi-tenant architecture and integrate with GitHub CI pipelines.
How Not to Choke on a Big Old Project
Discover effective strategies for managing large legacy C++ projects, exploring DevSecOps, static and dynamic analysis, and quality control platforms to enhance code quality and security.
Automated Static Analysis Warning Resolution Using Software Bots - A Sorald Demo
Discover how to automate fixing SonarQube violations using Sorald, a software bot that monitors GitHub repositories and submits patches through pull requests, streamlining code maintenance.