DevSecOps - how to make your code secure?

DevSecOps - how to make your code secure? by Paulina Dubas
This workshop provides an introduction to the principles of DevSecOps and teaches practical techniques to integrate security into every phase of the software development lifecycle. By adopting DevSecOps practices, developers and engineers will be better equipped to ensure their code is secure from the outset, reducing vulnerabilities and preventing security breaches. Participants will engage in hands-on activities to experience secure coding and security testing methods in a CI/CD pipeline.
Workshop goals:
By the end of this workshop, participants will:

1. Understand the principles of DevSecOps and the importance of security in the development process.
2. Be able to integrate security into the Continuous Integration/Continuous Deployment (CI/CD) pipeline.
3. Learn and apply best practices for secure coding.
4. Use automated security tools to scan for vulnerabilities in code and dependencies.
5. Understand how to secure infrastructure in code (IAC) and cloud environments.

Duration: 2 hours
Location: SOHO
Price: free
Target audience:

• Developers, DevOps engineers
• Anyone interested in learning how to integrate security into their software development lifecycle

Pre-requisities:

• Basic understanding of DevOps practices
• Familiarity with a programming language (e.g., Python, JavaScript)
• Basic knowledge of security vulnerabilities (nice to have)