The love-hate relationship between DevOps and security.
What it’s about
A provocative title for a talk that was needed: the DevOps revolution was bringing in new security problems.
I go through the usual security mistakes in a DevOps culture, insecure containers, secrets in environment variables and pipelines with no controls at all. And how to do DevSecOps right.
Why it’s relevant
In 2015 DevOps was booming. Everyone wanted to deploy fast and hardly anyone thought about security.
The talk was a wake-up call: if you go fast without security, sooner or later it blows up in your face.
Impact
It was one of the first talks in Spain about DevSecOps. It helped get the topic discussed in the development community.