Tag: Secure DevOps
The Agent Proposes, the Pipeline Disposes: Controls for AI-Authored Change
Veera Ravindra Divi | | agent permissions, agentic coding, AI change control, AI code review, AI coding agents, AI Governance, AI pull requests, AI software development, AI-authored code, AI-generated code security, autonomous coding agents, bounded-write agents, change-budget gates, CI/CD security, human-in-the-loop, in-toto, independent evals, least-privilege, policy as code, protected paths, provenance attestation, provenance verification, Secure DevOps, signed attestations, Sigstore, SLSA, Software Supply Chain Security, staged autonomyWhen agents write code and open pull requests faster than humans can read them, ‘the diff looked fine’ stops being a control. The durable controls live outside the agent’s reasoning loop ...
Secure DevOps at Scale: Integrating SRE, DevSecOps and Compliance
Johnbosco Ejiofor | | agile development, cloud-native security, compliance automation, devsecops, enterprise applications, regulatory standards, SaaS development, Secure DevOps, security and reliability, site reliability engineeringEnterprises developing SaaS products face the challenge of balancing innovation, security, and compliance. By adopting Secure DevOps practices—integrating security into every stage of development—and implementing site reliability engineering (SRE), organizations can enhance ...
DevSecOps in Practice: Closing the Gap Between Development Speed and Security Assurance
Usman Peter | | application security automation, automated vulnerability scanning, CI/CD pipeline security, cloud and container security, continuous feedback loops, continuous security integration, developer security mindset, development speed and security balance, devsecops, DevSecOps best practices, risk-based security, SaferNet VPN, Secure DevOps, secure software development, security as code, security automation tools, security champions, security culture, shift left security, Software Supply Chain SecurityIn the world of modern software development, speed is king. Teams are under constant pressure to release features, fix bugs and stay ahead of competitors. Yet, as development velocity increases, so does ...
AI’s Impact on Secure DevOps and the Future of Secure Software Development
Pankit Desai | | AI for secure software development, AI for software security, AI in DevOps, AI vulnerability detection, AI-driven security testing, AI-powered DevOps tools, AI-powered vulnerability scanning., Continuous integration and continuous delivery (CI/CD), DevSecOps AI, Secure DevOpsLet’s explore how AI is reshaping secure DevOps, and what this means for the future of software development. ...
CloudCoreo: Get Your Cloud Security on at Jenkins World
Don Macvittie | | Cloud Security, CloudCoreo, devsecops, Jenkins World 2017, Secure DevOps, securityI mentioned in a previous blog post that I’d take some more of the people pinging me about Jenkins World 2017 and post about them. One of the companies I’ve picked to ...
Automated Testing: Remember Security
Between continuous integration (CI) and release automation (RA), we’ve come a long way in making testing both integral and automated. This testing has allowed QA staff and developers to spend more time ...
DevOps and Database Security
Osterman Research recently released a survey-based report on database security. The results don’t exactly instill confidence where username breaches are concerned: While more than 50 percent of respondents felt that a breach ...
