Upgrade to Pro — share decks privately, control downloads, hide ads and more …
Sign up for free

Securing your software supply chain

Avatar for Nicolas Byl Nicolas Byl
April 17, 2020
Technology
410
0

Securing your software supply chain

Avatar for Nicolas Byl

Nicolas Byl

April 17, 2020

More Decks by Nicolas Byl

See All by Nicolas Byl
Platform Engineering ❤️ Developer Experience
Avatar for Nicolas Byl nbyl
0
72
Die Flucht aus der Prototypen-Hölle
Avatar for Nicolas Byl nbyl
0
66
Lean Prototyping for Industrial-IoT Projects
Avatar for Nicolas Byl nbyl
0
88
DevSecOps - Vom Unikum zur gut geölten Maschine
Avatar for Nicolas Byl nbyl
0
130
Keeping-Up-WithUpstream.pdf
Avatar for Nicolas Byl nbyl
0
200
Dr. Kube und der Helm - Anatomie einer CD-Pipeline
Avatar for Nicolas Byl nbyl
0
160
Securing the "other" supply chain
Avatar for Nicolas Byl nbyl
0
350
Kubernetes - Auf die Cluster, Fertig, Los!
Avatar for Nicolas Byl nbyl
0
230
Helm - Kubernetes Deployments richtig gemacht
Avatar for Nicolas Byl nbyl
0
160

Other Decks in Technology

See All in Technology
AI時代の開発はウォーターフォールに回帰する？ / development-with-ai-back-to-wf
Avatar for 岡本卓也 okamototakuyasr2
0
150
"AWSはちょっと苦手"でも大丈夫。AWS Blocks で手軽に作る Flutter のバックエンド #FlutterKaigi
Avatar for Kihara, Takuya tacck
PRO
0
110
今から始めるAWS環境の暗号移行 - ポスト量子時代に備える
Avatar for sato4mi sato4mi
0
100
国際カードブランドルール変更に伴うクレジットカード決済取引仕様変更について
Avatar for Keiichi Nomura k1style
0
260
Vue.jsのGitHubから学ぶ意思決定
Avatar for Yuto Nagai(Future) yut0naga1_fa
1
340
reInvent2026stby LT00 "Change your life!"
Avatar for Shinichiro Kawano shinichirokawano
1
460
キヨさん67歳 AIコーディングエージェント物語
Avatar for コロッケそば happysamurai294
0
120
AI秘書と毎日働くのはもう当たり前。開発以外の業務に足りない機能をどう埋める？
Avatar for みのるん minorun365
PRO
4
1.9k
AWSセキュリティで活用するAI機能
Avatar for cm-usuda-keisuke cmusudakeisuke
1
360
Microsoft のサポート ライフサイクルを理解する
Avatar for Murachi Akira murachiakira
PRO
0
230
AWS Continuum for Penetration Testing に Deep Dive してみる
Avatar for 浅野晴輝 asanoharuki
2
1.4k
Content Mapper APIの応用例～CSS Modules、言語ファイル～
Avatar for uhyo uhyo
2
230

Featured

See All Featured
Speed Design
Avatar for Sergey Chernyshev sergeychernyshev
33
2.2k
Marketing to machines
Avatar for Jono Alderson jonoalderson
1
5.9k
The SEO Collaboration Effect
Avatar for Kristina Bergwall kristinabergwall1
1
600
Highjacked: Video Game Concept Design
Avatar for Ryan Kendrick rkendrick25
PRO
1
500
Color Theory Basics | Prateek | Gurzu
Avatar for Gurzu gurzu
1
500
Deep Space Network (abreviated)
Avatar for Tony Rice tonyrice
0
390
Site-Speed That Sticks
Avatar for Harry Roberts csswizardry
13
1.6k
Navigating Weather and Climate Data
Avatar for Ryan Abernathey rabernat
0
570
GitHub's CSS Performance
Avatar for Jon Rohan jonrohan
1033
470k
Designing Powerful Visuals for Engaging Learning
Avatar for Mike Taylor tmiket
1
620
Ethics towards AI in product and experience design
Avatar for Skipper Chong Warson skipperchong
2
450
For a Future-Friendly Web
Avatar for Brad Frost brad_frost
184
11k

Transcript

  1. Securing your software supply chain Anatomie einer DevSecOps Pipeline 1

  2. Storytime 2

  3. 3 The way of the Code

  4. The castle illusion 4

  5. 5 The way of the Code

  6. 6 The way of the Code

  7. Code reviews 7

  8. Signing git commits 8

  9. 9 The way of the Code

  10. The dependency iceberg 10

  11. Automation is king 11 • FindBugs • SonarQube • SAST/DAST

    • Maven, NPM, ... • Container Images • Operating System • npm audit • Dependabot • Renovate Source Code Analysis Dependency Analysis Update Automation

  12. 12 The way of the Code

  13. 13 The key to the kingdom

  14. 14 Current situation deploy

  15. 15 Zero-Trust Deployment IAM deploy poll

  16. 16 Policy trumps checks IAM deploy poll

  17. codecentric AG Kreuznacher Straße 30 60486 Frankfurt am Main Telefon:

    +49 (0) 173.731 02 40 Nicolas Byl Senior Cloud Consultant [email protected] www.codecentric.de Innovative - Trustful - Competent - Pragmatic 17