Security in OSS DevOps

•

0 likes•534 views

Cheah Eng Soon

Security in OSS DevOps (Java) - WhiteSource Bolt

Technology

www.techconnect.io
Security in OSS DevOps
Eng Soon Cheah
@CheahEngSoon

Agenda
• Get Real-Time Alerts on Security Vulnerabilities
• Ensure license compliance
• Automated Up-to-Date Inventory Reports
• Track the Outdated Libraries in Your Project
• DEMO
• References

Get Real-Time Alerts on Security Vulnerabilities

Track the Outdated Libraries in Your Project

Prerequisites
• Install WhiteSource Bolt from Visual Studio Marketplace.
(https://marketplace.visualstudio.com/items?itemName=whiteso
urce.ws-bolt)
• Deploy Project from Azure DevOps Demo Generator to Azure
DevOps Account
(https://azuredevopsdemogenerator.azurewebsites.net/)

References
• WhiteSource Bolt Azure DevOps Lab
https://www.azuredevopslabs.com/labs/vstsextend/whitesource/
• Blog (Azure Security Center)
http://www.techconnect.io/category/azure-security/
• YouTube Channel
https://www.youtube.com/user/cheahengsoon

What's hot

Continuous Delivery - Voxxed Days Cluj-Napoca 2017Rafał Leszko

“Sensu and Sensibility” - The Story of a Journey From #monitoringsucks to #mo...Puppet

Self-Hosta Web APILearningTech

ITT 2015 - Vincent Garrigues - Continuous Integration at SoundCloudIstanbul Tech Talks

[English][Test Girls] Zero to Hero: Start Test automation with CypressTest Girls

DevOps & Security: Here & NowCheckmarx

Making Security Usable: Product Engineer PerspectiveC4Media

Continuous Security Testing with Devops - OWASP EU 2014Stephen de Vries

Vulnerabilities are bugs, Let's Test For Them!VAddy

Security at GreenhouseMichael O'Neil

Continuous Security Testing in a Devops World #OWASPHelsinkiStephen de Vries

T23 HTML5 Security Testing at SpotifyTechWell

CodeIgniter For Project : Lesson 105 - Helper and LibraryWeerayut Hongsa

Tune your App Perf (and get fit for summer)Sqreen

Security as Code: DOES15Ed Bellis

Hacker Proof web app using Functional testsAnkita Gupta

The moment my site got hackedMarko Heijnen

The Dog Ate My Deployment - Symfony Usergroup Cologne July 2013D

Dennis Benkert - The Dog Ate My Deployment - Symfony Usergroup Berlin March ...D

Amazon inspector で自動セキュリティ診断Ryo Shibayama

What's hot (20)

Continuous Delivery - Voxxed Days Cluj-Napoca 2017

“Sensu and Sensibility” - The Story of a Journey From #monitoringsucks to #mo...

Self-Hosta Web API

ITT 2015 - Vincent Garrigues - Continuous Integration at SoundCloud

[English][Test Girls] Zero to Hero: Start Test automation with Cypress

DevOps & Security: Here & Now

Making Security Usable: Product Engineer Perspective

Continuous Security Testing with Devops - OWASP EU 2014

Vulnerabilities are bugs, Let's Test For Them!

Security at Greenhouse

Continuous Security Testing in a Devops World #OWASPHelsinki

T23 HTML5 Security Testing at Spotify

CodeIgniter For Project : Lesson 105 - Helper and Library

Tune your App Perf (and get fit for summer)

Security as Code: DOES15

Hacker Proof web app using Functional tests

The moment my site got hacked

The Dog Ate My Deployment - Symfony Usergroup Cologne July 2013

Dennis Benkert - The Dog Ate My Deployment - Symfony Usergroup Berlin March ...

Amazon inspector で自動セキュリティ診断

Similar to Security in OSS DevOps

Zure Azure PaaS Zero to Hero - DevOps training dayOkko Oulasvirta

Secure Your Code Implement DevSecOps in Azurekloia

Puppet Camp Melbourne Nov 2014 - A Build Engineering Team’s Journey of Infras...Peter Leschev

DevOps on AWS: Accelerating Software Delivery with the AWS Developer ToolsAmazon Web Services

ContainerConf 2022: Hijack KubernetesNico Meisenzahl

AppSec DC 2019 ASVS 4.0 Final.pptxJosh Grossman

AppSec DC 2019 ASVS 4.0 Final.pptxTuynNguyn819213

Azure Serverless ConfJose Javier Columbie

Continuous Deployment with Amazon Web ServicesJulien SIMON

AWS re:Invent 2016: DevOps on AWS: Accelerating Software Delivery with the AW...Amazon Web Services

TechDays Finland 2020: Best practices of securing web applications running on...Karl Ots

Continuous Integration and Deployment Best Practices on AWSAmazon Web Services

Open service broker API with Azure Kubernetes ServicesJorge Arteiro

Building a low cost hack labJoe McCray

AWS Community Day Bangkok 2019 - Dev Ops Philosophy Increase ProductivityAWS User Group - Thailand

Azure DevOps for QA AutomationEvgeny Popovich

Eclipse sw360 Web Application for managing software Bill-Of-Material, FASTEN ...Fasten Project

How to Never Leave Your Deployment UnattendedAltoros

aOS Singapore 2019-Azure Secure DevOps KitCheah Eng Soon

Develop Azure compute solutions Part - 2AzureEzy1

Similar to Security in OSS DevOps (20)

Zure Azure PaaS Zero to Hero - DevOps training day

Secure Your Code Implement DevSecOps in Azure

Puppet Camp Melbourne Nov 2014 - A Build Engineering Team’s Journey of Infras...

DevOps on AWS: Accelerating Software Delivery with the AWS Developer Tools

ContainerConf 2022: Hijack Kubernetes

AppSec DC 2019 ASVS 4.0 Final.pptx

Azure Serverless Conf

Continuous Deployment with Amazon Web Services

AWS re:Invent 2016: DevOps on AWS: Accelerating Software Delivery with the AW...

TechDays Finland 2020: Best practices of securing web applications running on...

Continuous Integration and Deployment Best Practices on AWS

Open service broker API with Azure Kubernetes Services

Building a low cost hack lab

AWS Community Day Bangkok 2019 - Dev Ops Philosophy Increase Productivity

Azure DevOps for QA Automation

Eclipse sw360 Web Application for managing software Bill-Of-Material, FASTEN ...

How to Never Leave Your Deployment Unattended

aOS Singapore 2019-Azure Secure DevOps Kit

Develop Azure compute solutions Part - 2

Recently uploaded

From Event to Action: Accelerate Your Decision Making with Real-Time AutomationSafe Software

Automating Business Process via MuleSoft Composer | Bangalore MuleSoft Meetup...shyamraj55

08448380779 Call Girls In Greater Kailash - I Women Seeking MenDelhi Call girls

Kalyanpur ) Call Girls in Lucknow Finest Escorts Service 🍸 8923113531 🎰 Avail...gurkirankumar98700

Understanding the Laravel MVC ArchitecturePixlogix Infotech

[2024]Digital Global Overview Report 2024 Meltwater.pdfhans926745

The Codex of Business Writing Software for Real-World Solutions 2.pptxMalak Abu Hammad

Boost PC performance: How more available memory can improve productivityPrincipled Technologies

A Domino Admins Adventures (Engage 2024)Gabriella Davis

Presentation on how to chat with PDF using ChatGPT code interpreternaman860154

Raspberry Pi 5: Challenges and Solutions in Bringing up an OpenGL/Vulkan Driv...Igalia

Breaking the Kubernetes Kill Chain: Host Path MountPuma Security, LLC

🐬 The future of MySQL is Postgres 🐘RTylerCroy

Handwritten Text Recognition for manuscripts and early printed textsMaria Levchenko

Histor y of HAM Radio presentation slidevu2urc

Swan(sea) Song – personal research during my six years at Swansea ... and bey...Alan Dix

How to Troubleshoot Apps for the Modern Connected WorkerThousandEyes

Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...Miguel Araújo

The Role of Taxonomy and Ontology in Semantic Layers - Heather Hedden.pdfEnterprise Knowledge

WhatsApp 9892124323 ✓Call Girls In Kalyan ( Mumbai ) secure servicePooja Nehwal

Recently uploaded (20)

From Event to Action: Accelerate Your Decision Making with Real-Time Automation

Automating Business Process via MuleSoft Composer | Bangalore MuleSoft Meetup...

08448380779 Call Girls In Greater Kailash - I Women Seeking Men

Kalyanpur ) Call Girls in Lucknow Finest Escorts Service 🍸 8923113531 🎰 Avail...

Understanding the Laravel MVC Architecture

[2024]Digital Global Overview Report 2024 Meltwater.pdf

The Codex of Business Writing Software for Real-World Solutions 2.pptx

Boost PC performance: How more available memory can improve productivity

A Domino Admins Adventures (Engage 2024)

Presentation on how to chat with PDF using ChatGPT code interpreter

Raspberry Pi 5: Challenges and Solutions in Bringing up an OpenGL/Vulkan Driv...

Breaking the Kubernetes Kill Chain: Host Path Mount

🐬 The future of MySQL is Postgres 🐘

Handwritten Text Recognition for manuscripts and early printed texts

Histor y of HAM Radio presentation slide

Swan(sea) Song – personal research during my six years at Swansea ... and bey...

How to Troubleshoot Apps for the Modern Connected Worker

Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...

The Role of Taxonomy and Ontology in Semantic Layers - Heather Hedden.pdf

WhatsApp 9892124323 ✓Call Girls In Kalyan ( Mumbai ) secure service

Security in OSS DevOps

1. www.techconnect.io Security in OSS DevOps Eng Soon Cheah @CheahEngSoon

2. Agenda • Get Real-Time Alerts on Security Vulnerabilities • Ensure license compliance • Automated Up-to-Date Inventory Reports • Track the Outdated Libraries in Your Project • DEMO • References

3. Get Real-Time Alerts on Security Vulnerabilities

4. Ensure license compliance

5. Automated Up-to-Date Inventory Reports

6. Track the Outdated Libraries in Your Project

7. Prerequisites • Install WhiteSource Bolt from Visual Studio Marketplace. (https://marketplace.visualstudio.com/items?itemName=whiteso urce.ws-bolt) • Deploy Project from Azure DevOps Demo Generator to Azure DevOps Account (https://azuredevopsdemogenerator.azurewebsites.net/)

8. DEMO

10.

11.

12.

13.

14.

15.

16.

17.

18.

19.

20.

21.

22.

23.

24. References • WhiteSource Bolt Azure DevOps Lab https://www.azuredevopslabs.com/labs/vstsextend/whitesource/ • Blog (Azure Security Center) http://www.techconnect.io/category/azure-security/ • YouTube Channel https://www.youtube.com/user/cheahengsoon

25. www.techconnect.io

Security in OSS DevOps

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Similar to Security in OSS DevOps

Similar to Security in OSS DevOps (20)

More from Cheah Eng Soon

More from Cheah Eng Soon (20)

Recently uploaded

Recently uploaded (20)

Security in OSS DevOps