Name
Moving Beyond DevOps to DevSecOps
Date & Time
Wednesday, November 16, 2022, 2:15 PM - 2:45 PM
Description

The ‘tip of the arrow’ for addressing software security starts with your DevOps pipeline. This truth may be hard to hear. We continually shift more responsibility left to developers that then require updates to all pipeline workflows. So what should developers be doing to ensure the integrity of the systems they deliver? What does it mean to evolve your DevOps pipeline to a DevSecOps pipeline?

In this session, we will explore what IT teams are doing to incorporate security policies into the DevOps pipeline and the challenges they must overcome to get there. Attendees of this session will learn:

  • Why SBOM generation is needed as part of the DevOps pipeline
  • Barriers to SBOM adoption
  • How moving to a CDEvent DevOps platform with a central catalog can simplify the move.
Tracy Ragan