Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Shifting Left Securely

Sponsored · Your Podcast. Everywhere. Effortlessly. Share. Educate. Inspire. Entertain. You do you. We'll handle the rest. →
Avatar for Matt Stratton Matt Stratton
April 28, 2016
Technology
0
210

Shifting Left Securely

Avatar for Matt Stratton

Matt Stratton

April 28, 2016
Tweet

More Decks by Matt Stratton

See All by Matt Stratton
Talk Selection As Mockumentary Film Editing
Avatar for Matt Stratton mattstratton
0
59
How Do You Infect Your Organization With Humane Ops?
Avatar for Matt Stratton mattstratton
0
150
Incidents and Accidents
Avatar for Matt Stratton mattstratton
0
180
Everything Is A Product - How To Apply Product Management Practices to Technology Services
Avatar for Matt Stratton mattstratton
0
970
The Handwaver's Guide to Contributing To Open Source - ChefConf 2017
Avatar for Matt Stratton mattstratton
0
660
Shifting Left Securely - DevOpsDays Denver 2017 Edition
Avatar for Matt Stratton mattstratton
0
1k
Making Infrastructure S'mores With Chef (ThatConference edition)
Avatar for Matt Stratton mattstratton
0
660
Making Infrastructure S'mores With Chef (KC DevOps edition)
Avatar for Matt Stratton mattstratton
0
85
The Five Love Languages of DevOps
Avatar for Matt Stratton mattstratton
2
170

Other Decks in Technology

See All in Technology
Kiro Meetup #7 Kiro アップデート (2025/12/15〜2026/3/20)
Avatar for Katz Ueno katzueno
2
200
欠陥分析（ODC分析）における生成AIの活用プロセスと実践事例 / 20260320 Suguru Ishii & Naoki Yamakoshi & Mayu Yoshizawa
Avatar for SHIFT EVOLVE shift_evolve
PRO
0
280
Zero Data Loss Autonomous Recovery Service サービス概要
Avatar for oracle4engineer oracle4engineer
PRO
3
13k
既存アプリの延命も，最新技術での新規開発も：WebSphereの最新情報
Avatar for Ryoto Katagiri ktgrryt
0
110
開発チームとQAエンジニアの新しい協業モデル -年末調整開発チームで実践する【QAリード施策】-
Avatar for kaomi kaomi_wombat
0
200
Mitigating geopolitical risks with local-first software and atproto
Avatar for Martin Kleppmann ept
0
160
「コントロールの三分法」で考える「コト」への向き合い方 / phperkaigi2026
Avatar for blue_goheimochi blue_goheimochi
0
130
めちゃくちゃ開発するQAエンジニアになって感じたメリットとこれからの課題感
Avatar for yama-cha-n ryuhei0000yamamoto
0
240
コンテキスト・ハーネスエンジニアリングの現在
Avatar for Hirosato Gamo hirosatogamo
PRO
6
700
大規模ECサイトのあるバッチのパフォーマンスを改善するために僕たちのチームがしてきたこと
Avatar for panda_program panda_program
1
340
Phase04_ターミナル基礎
Avatar for overflow ,Inc overflowinc
0
1.3k
SSoT（Single Source of Truth）で「壊して再生」する設計
Avatar for かわうそ kawauso
1
190

Featured

See All Featured
How to optimise 3,500 product descriptions for ecommerce in one day using ChatGPT
Avatar for Katarina Dahlin katarinadahlin
PRO
1
3.5k
10 Git Anti Patterns You Should be Aware of
Avatar for Lemi Orhan Ergin lemiorhan
PRO
659
61k
SEO Brein meetup: CTRL+C is not how to scale international SEO
Avatar for Linda Hogenes lindahogenes
1
2.5k
Practical Tips for Bootstrapping Information Extraction Pipelines
Avatar for Matthew Honnibal honnibal
25
1.8k
GraphQLの誤解/rethinking-graphql
Avatar for sonatard sonatard
75
11k
Bridging the Design Gap: How Collaborative Modelling removes blockers to flow between stakeholders and teams @FastFlow conf
Avatar for Kenny Baas-Schwegler baasie
0
490
Bootstrapping a Software Product
Avatar for Garrett Dimon garrettdimon
PRO
307
120k
Joys of Absence: A Defence of Solitary Play
Avatar for Sebastian Deterding codingconduct
1
320
Build The Right Thing And Hit Your Dates
Avatar for Maggie C. maggiecrowley
39
3.1k
Navigating the Design Leadership Dip - Product Design Week Design Leaders+ Conference 2024
Avatar for Andy Polaine apolaine
0
240
First, design no harm
Avatar for Per Axbom axbom
PRO
2
1.1k
Mobile First: as difficult as doing things right
Avatar for Swwweet swwweet
225
10k

Transcript

  1. SHIFTING LEFT SECURELY

  2. WHOAMI

  3. QUALITY AND INNOVATION HISTORICALLY, A TRADEOFF

  4. None
  5. None
  6. None
  7. None
  8. None
  9. None
  10. None
  11. None
  12. None

  13. VERSIONED MODULARIZED TESTED

  14. HOW DOES THIS HELP ME WITH SECURITY?

  15. None
  16. None
  17. None
  18. None

  19. TO REVIEW > Treat your pipeline as code > Trust

    (but verify) your domain experts > Share the cooking > Use your production audit tests in your pipeline > Did I mention test?

  20. QUESTIONS?

  21. RESOURCES > Sidney Dekker - Field Guide to Human Error

    > github.com/mattstratton/shift-left-securely > twitter.com/mattstratton > speakerdeck.com/mattstratton > arresteddevops.com