Upgrade to Pro — share decks privately, control downloads, hide ads and more …
Sign up for free

Securing your software supply chain

Avatar for Nicolas Byl Nicolas Byl
April 17, 2020
Technology
410
0

Securing your software supply chain

Avatar for Nicolas Byl

Nicolas Byl

April 17, 2020

More Decks by Nicolas Byl

See All by Nicolas Byl
Platform Engineering ❤️ Developer Experience
Avatar for Nicolas Byl nbyl
0
71
Die Flucht aus der Prototypen-Hölle
Avatar for Nicolas Byl nbyl
0
65
Lean Prototyping for Industrial-IoT Projects
Avatar for Nicolas Byl nbyl
0
87
DevSecOps - Vom Unikum zur gut geölten Maschine
Avatar for Nicolas Byl nbyl
0
130
Keeping-Up-WithUpstream.pdf
Avatar for Nicolas Byl nbyl
0
200
Dr. Kube und der Helm - Anatomie einer CD-Pipeline
Avatar for Nicolas Byl nbyl
0
160
Securing the "other" supply chain
Avatar for Nicolas Byl nbyl
0
340
Kubernetes - Auf die Cluster, Fertig, Los!
Avatar for Nicolas Byl nbyl
0
230
Helm - Kubernetes Deployments richtig gemacht
Avatar for Nicolas Byl nbyl
0
160

Other Decks in Technology

See All in Technology
AI駆動開発、viviONの1年 ── うまくいったこと・いかなかったこと
Avatar for viviON vivion
0
270
ハードウェアコンペでもAI駆動開発が進んでいる話
Avatar for misoji engineer iotengineer22
0
390
データ品質を壊しながらSnowflakeのAIに分析させてみた
Avatar for かわなご kawanago
0
540
SDDの運用にめげずに向き合った話
Avatar for SansanTech sansantech
PRO
1
140
全人類（ほぼ）AWS Organizations の上でAWSを利用している、その世界を知る話
Avatar for Hayato Tan htan
0
120
あなたの知らないAmazon VPC Route Server／Amazon VPC Route Server you don't know about
Avatar for モブエンジニア（Masaki Okuda） masakiokuda
2
230
味覇で作るパスタが美味い - 20261001_yabaubuki.dev
Avatar for Livesense Inc. livesense
PRO
0
100
ミイダス株式会社 テックチームのご紹介 / MIIDAS Tech Team
Avatar for ミイダス miidas
0
170
[AWS 秋のクラウドオペレーション祭り 2026]AWS DevOps Agentで変わる リリースと運用対応 ~リリース管理機能と Directed actions のご紹介~
Avatar for Toshihiro Furuno furuton
4
1.1k
おそらく日本で唯一のDevRelインターン生として
Avatar for husensan husengs7
0
170
検証フェーズはAIの回答を判断するための学習機会
Avatar for Toru_Kubota toru_kubota
2
520
初対面のメンバーがチームを組み、Claude Codeでゼロからサービスをリリース
Avatar for k.masachika mkdev10
0
110

Featured

See All Featured
StorybookのUI Testing Handbookを読んだ
Avatar for Shingo Yamazaki zakiyama
31
7k
First, design no harm
Avatar for Per Axbom axbom
PRO
2
1.3k
The Mindset for Success: Future Career Progression
Avatar for Greg Gifford greggifford
PRO
0
530
A better future with KSS
Avatar for Kyle Neath kneath
240
18k
Into the Great Unknown - MozCon
Avatar for Noah Learner thekraken
41
2.8k
Why Your Marketing Sucks and What You Can Do About It - Sophie Logan
Avatar for Sophie Logan marketingsoph
0
420
The World Runs on Bad Software
Avatar for Brandon Keepers bkeepers
PRO
72
12k
Digital Ethics as a Driver of Design Innovation
Avatar for Per Axbom axbom
PRO
1
450
The Pragmatic Product Professional
Avatar for Laura Van Doore lauravandoore
37
7.5k
Why You Should Never Use an ORM
Avatar for John Nunemaker jnunemaker
PRO
61
10k
Understanding Cognitive Biases in Performance Measurement
Avatar for Philip Tellis bluesmoon
32
3k
Design of three-dimensional binary manipulators for pick-and-place task avoiding obstacles (IECON2024)
Avatar for konakalab konakalab
0
610

Transcript

  1. Securing your software supply chain Anatomie einer DevSecOps Pipeline 1

  2. Storytime 2

  3. 3 The way of the Code

  4. The castle illusion 4

  5. 5 The way of the Code

  6. 6 The way of the Code

  7. Code reviews 7

  8. Signing git commits 8

  9. 9 The way of the Code

  10. The dependency iceberg 10

  11. Automation is king 11 • FindBugs • SonarQube • SAST/DAST

    • Maven, NPM, ... • Container Images • Operating System • npm audit • Dependabot • Renovate Source Code Analysis Dependency Analysis Update Automation

  12. 12 The way of the Code

  13. 13 The key to the kingdom

  14. 14 Current situation deploy

  15. 15 Zero-Trust Deployment IAM deploy poll

  16. 16 Policy trumps checks IAM deploy poll

  17. codecentric AG Kreuznacher Straße 30 60486 Frankfurt am Main Telefon:

    +49 (0) 173.731 02 40 Nicolas Byl Senior Cloud Consultant [email protected] www.codecentric.de Innovative - Trustful - Competent - Pragmatic 17