Workshop - DevSecOps from Scratch for Java and Kotlin Developers

Do you have a private project, an open-source tool or want to do a POC? Do you already have the idea in mind and you wish to get started? On the other hand, are you looking for a suitable environment so that you get the best possible support for your development?
JFrog offers you just the right tools for this. You can get access to the JFrog Platform and use it freely. Artifactory, Xray and more and this means that a complete DevSecOps environment is at your disposal.

In this workshop, I will show you the individual components step by step and help you set them up for your project. This workshop is divided into several parts, and each deals with a specific section of the development.

In the basic module, we will set up a project based on maven consisting of one module so that you can get started with Java and Kotlin.

Prerequisite Requirements

Prior to the workshop, please sign up for the JFrog Free Tier Cloud Account at https://jfrog.co/SvenDevOpsTools929. (No Credit Card required)

Having this set up in advance is great, but you will also have a chance to sign up when you arrive at the workshop.

The IDE
You need an IDE that supports Java and maven. I personally use IntelliJ and the screencasts are based on this IDE. The free version is perfect for this workshop. But you can use whatever IDE fits your needs.

IDE Support for Xray
To have IDE Support based on the Xray Plugin from JFrog, you need one of listed IDEs. The actual list is under the following URL https://www.jfrog.com/confluence/display/JFROG/IDE+Integration

Docker
You need Docker on your machine for some parts of this tutorial. It is possible to skip this element during the workshop.

Java and Maven
This tutorial is based on Java version 8 or higher and maven. All JDK´s should fit, there are no special requirements that I am aware of. Maven is used in a version higher 3.3. Please make sure you have access to it. You can use the bundled maven version. The archive is inside the folder _data/maven and contains the maven version 3.6.3 as tar.gz file.

Timetable and Agenda
The tutorial is planned to be done in approx 2h in total.
The BirdEyeView:
Intro into the JFrog Platform
Demo - HowTo create a generic repository
Maven and the HelloWorld
Vulnerabilities and how to visualize them

Bio:

Sven Ruppert has been coding Java since 1996 in industrial projects, is working as Developer Advocate for JFrog and Groundbreaker Ambassador (former Oracle Developer Champion). He is regularly speaking at Conferences worldwide and contributes to IT periodicals, as well as tech portals. He was working for over 15 years as a consultant worldwide in industries like Automotive, Space, Insurance, Banking, UN and WorldBank. Additional to his main topic DevSecOps he is working on Mutation Testing of Web apps and Distributed UnitTesting besides his evergreen topics Core Java and Kotlin.

Linkedin: https://www.linkedin.com/in/svenruppert/