Introduction to OpenStack security tools for development

Bio: Trevor is a software developer at AT&T where he spent a year and a half contributing to trove and neutron upstream. Now he is working with upstream's CI/CD.

Abstract: In this talk, Trevor will cover the different OpenStack security tools that are available upstream and give demos to as many as possible. Projects that will be covered (with or without demos) are:

Anchor - ephemeral PKI

Bandit - static analysis for Python

Syntribos - Python API security testing tool