A Definition of Done for DevSecOps

[video:https://youtu.be/oQE8ysEvzaQ width:300 height:200 align:right]

DevOps needs to consider many different aspects of software quality to deliver reliable software continuously. The term DevSecOps was developed to highlight that security is a key component of quality and cannot be ignored during continuous delivery. Join Gene Gotimer as he discusses how to determine a definition of done that includes security for DevOps pipelines. He'll discuss how continuous integration can invoke static analysis tools to test for security errors and check for software vulnerabilities. You'll learn how automated deployments and virtualization make dynamic environments available for testing in a production-like setting, and explore approaches to leverage existing regression tests to test for security as a side effect. Gene will reveal how a DevOps pipeline can be designed with security in mind. You will leave this presentation with an understanding of how to construct a definition of done that includes security and how to choose security testing practices that assure you are doing DevSecOps properly.