The security of the systems we build is often of huge importance, but it's also often treated as something of an afterthought. DevSecOps is designed to try and address this issue and find better ways to integrate security and security thinking into the development process. This is even more important as we adopt faster and more effective continuous delivery working styles. If our goal is to build release-ready software multiple times a day, and its security is part of what defines its releasability, that means we need to build secure, release-ready software multiple times a day. So what does this require, how does security fit into a continuous delivery world?

In this episode, Dave Farley explores how we can incorporate security and security thinking into our work practices, provides some security tips for developers, and describes what an effective approach to DevSecOps looks like.

_____________________________________________________

LEFT:

Specflow Gherkin Cheet Sheet ️ https://go.specflow.org/cd-gherkin-cheet-sheet

Snyk – DevSecOps Overview ️ https://snyk.io/series/devsecops/

DevSecOps and Supply Chain Security ️ https://www.brighttalk.com/webcast/ 14777/497425

DevSecOps and Supply Chain Security ️ https://www.techtarget.com/searcherp/definition/supply-chain-security

“Great DevSecOps” ️ https://github.com/TaptuIT/awesome- devsecops#dependency-management

_____________________________________________________

BOOKS:

Dave's NEW BOOK /"Modern Software Engineering/" is now available here ️ https://amzn.to/3DwdwT3

In this book, Dave brings together his ideas and proven techniques to describe a lasting, coherent, and fundamental approach to effective software development for programmers, managers, and technical leaders of all experience levels.

/"Continuous Delivery Pipelines/" by Dave Farley
Paperback ️ https://amzn.to/3gIULlA
E-book version ️ https://leanpub.com/cd-pipelines

The original, award-winning book “Continuous Delivery” by Dave Farley and Jez Humble ️ https://amzn.to/2WxRYmx

NOTE: If you click on one of the Amazon affiliate links and purchase the book, Continuous Delivery Ltd. will receive a small fee for the referral, at no additional cost to you.

—————————————————————————————————
Also from Dave:

CD TRAINING
If you want to learn Continuous Delivery and DevOps skills, check out Dave Farley's courses
️ https://bit.ly/DFTraining

JOIN CD MAILING LIST
Stay up to date with the latest discussions, free tutorials, events, online courses and exclusive offers. ️ https://bit.ly/MailListCD

—————————————————————————————————

CHANNEL SPONSORS:

Linode offers Linux virtual machines with global infrastructure and simple pricing caps. No surprise bills, no lock-in, and the same price across all data centers. Find out if Linode is right for you with a 60-day $100 credit by signing up HERE ️ https://linode.com/cd

Equal Experts is a product software development consulting firm with a network of over 1,000 experienced technology consultants worldwide. They increase the pace of innovation by using modern software development practices that consider continuous delivery, security and usability from the start ️ https://bit.ly/3ASy8n0

Harness helps engineers and developers simplify and scale CI/CD, feature flags, and cloud cost management with an AI-powered software delivery platform. ️ https://bit.ly/3Cfx3qI

Octopus are the makers of Octopus Deploy, the central place where your team can manage releases, automate deployments, and automate the runbooks that keep your software running. ️ https://octopus.com/

SpecFlow Behavior Driven Development for .NET SpecFlow helps teams bind automation to feature files and share the resulting examples as living documentation within the team and with stakeholders. ️ https://go.specflow.org/dave_farley

Please take the opportunity to connect with your friends and family and share this video with them if you find it useful.