Cloud Native Security Part 1: Scaling DevSecOps with GitLab Cl

Tuesday, 11 Mar 2025 10:30AM EDT (11 Mar 2025 14:30 UTC)
Speaker: Eric Johnson

The 2024 Accelerate State of DevOps report shows that software delivery is faster than ever, with 41% of teams deploying systems more than once a week. As speed increases, the average change control lead time has dropped to less than a week.

In conversations with students last year, one of the most common topics was: Our security team is struggling to keep up. How do we scale this?

Join SANS Author and Instructor Eric Johnson to learn about GitLab CI Components and how to create a centralized suite of reusable security jobs. Attendees will see how to integrate a component into a product pipeline and view the results during the merge request process.

This webcast supports content and knowledge from SEC540: Cloud Native Security and DevSecOps Automation™. To learn more about this course, explore upcoming sessions, and access your FREE demo, click here.

Login to Register

Related Content

October 21, 2016

Continuous Integration: Live Static Analysis with Roslyn

Early in 2016, I had a conversation with a colleague about the very, very limited free and open-source .NET security static analysis options. We discussed CAT.NET, which released back in 2009 and hasn't been updated since. Next came FxCop, which has a few security rules looking for SQL Injection...

September 3, 2015

Breaking CSRF: Spring Security and Thymeleaf

As someone who spends half of their year teaching web application security, I tend to give a lot of presentations that include live demonstrations, mitigation techniques, and exploits. When preparing for a quality assurance presentation earlier this year, I decided to show the group a demonstration...

Secure Software Development Lifecycle Overview

In a previous post, we received a question asking, "what is a secure software development lifecycle"? This is an excellent question, and one that I receive quite often from organizations during an application security assessment.Let's quickly review the Software Development Lifecycle, also known as...