Supply Chain Security with the Jenkins Templating Engine

Explore DevSecOps and supply chain security in this 30-minute conference talk from KubeCon + CloudNativeCon Europe 2022. Gain a comprehensive introduction to DevSecOps, moving beyond buzzwords to understand various software security scanning techniques for shifting security left in the software delivery process. Learn how to apply these principles at scale using the Jenkins Templating Engine, developing tool-agnostic pipelines shareable across teams. Discover strategies for overcoming adoption challenges, defining software delivery processes, and refactoring for reusability. Delve into hierarchical pipeline configurations and the JTE mental model to enhance your understanding of supply chain security implementation.

Supply Chain Security With The Jenkins Templating Engine!
DevSecOps Overview
Challenges in Scaling Adoption
What Causes This Pain?
Step 1: Defining our Software Delivery Process
Step 2: Refactoring
Making Libraries Reusable
Hierarchical Pipeline Configurations
JTE Mental Model
Take Aways