All the stuff – a roundup form the MDSO community
We’ve decided to make it even easier for you to know about the excellent things happening in the MyDevSecOps community, so we’ve put together a digest of the best things that happened in the community recently. Feel free to get in touch if you want to see yours in the next digests.
Tools and projects
-
TerraGoat is Bridgecrew’s “Vulnerable by Design” Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments. [LINK]
-
VSCode Extension – Security Scanner to find and fix vulnerabilities in JavaScript and TypeScript. Inspired by Import Cost [LINK]
Podcast
-
Ep. #60, Navigating the Terrain of Shared Responsibility with Iftach Ian Amit, CSO at Cimpress [LINK]
-
Ep. #61, The rise of HTTPS and Front-End Security Toolbox with Scott Helme [LINK]
Live sessions
-
2FA in 2020 and Beyond, Kelley Robinson [LINK]
Events
Below is a roundup of some of the security events that came our way. Feel free to share your events and meetups with us.
-
The flagship MyDevSecOps community event – DevSecCon24 is getting hotter every day, find more info and register here [LINK]
-
OpenObservability Conf [LINK]
-
DevOps Enterprise Live [LINK]
-
OpenSecSummit [LINK]
-
CloudSummit [LINK]
-
ICYMI: catch the recordings from the incredible Software Circus – Down the Rabbit Hole event [LINK]
Other useful links
-
The State of Open Source Security survey is still open and Snyk will be donating $1 to charity per respondent, so now’s the time to do your part [LINK]
-
CNCF H1 Survey [LINK]
-
The State of Cloud Native Development Survey [LINK]
If you have something to share with the community – feel free to join the MyDevSecOps community Slack, or send the team an email.