DevSecOps with OWASP DevSlop
Offered By: OWASP Foundation via YouTube
Course Description
Overview
Explore DevSecOps practices with OWASP DevSlop in this conference talk from OWASP Global AppSec Tel Aviv. Learn about the "Patty the Pipeline" project, which demonstrates secure component management, secret retrieval from a secret store, and code validation through negative unit tests, DAST, SAST, and encryption and infrastructure verification. Discover how to implement DevSecOps principles using open-source tools like SSL Labs, White Source Bolt, Azure DevOps Security Toolkit, and OWASP Zap. Gain insights from speakers Nancy Gariché, founder of BDB Skills, and Tanya Janca, Senior Cloud Advocate at Microsoft, as they provide a comprehensive start-to-finish demo of each pipeline component. Access supporting videos and resources to enhance your understanding of DevSecOps and improve your own development pipelines.
Syllabus
Intro
Patty Pipeline
Meet Tanya
About DevSecOps
AppSecOps
SSL Lab
Secret Store
Scan for Secrets
Taught by
OWASP Foundation
Related Courses
Application Security for Developers and DevOps ProfessionalsIBM via Coursera Security and Auditing in Ethereum
EDUCBA via Coursera Exploiting and Securing Vulnerabilities in Java Applications
University of California, Davis via Coursera Become a CompTIA Security+ Certified Security Professional (SY0-601)
LinkedIn Learning CISSP Cert Prep (2021): 8 Software Development Security
LinkedIn Learning