Related content in this Stream
How to Get Started Securing Your Internal Software Supply Chain
Hear Alex Barbato and John Kjell of the VMware Tanzu team discuss why it's important, but still challenging, to secure your software supply chain. Importantly, they focus on the process of...
Treating Security Like a Product at the U.S. Army Software Factory
How the U.S. Army improved its cybersecurity posture by integrating controllable input metrics, product management, and balanced teams into its software development organization.
Creating a Culture of DevSecOps
To maintain robust security without compromising development velocity, we need to encourage better collaboration between security specialists and delivery teams.
Implementing DevSecOps in a Federal Agency with VMware Tanzu
Tanzu Labs partnered with a major branch of the Department of Defense to build an automated DevSecOps process using VMware Tanzu and several open source tools.
Why Path-to-Production Analysis Is a Must for Software Development Teams
Path-to-production analysis enables you to identify all the steps in the process, including the wait time and duration (cycle time) of each of them.
Improve Your Cybersecurity with a Secure Software Development Supply Chain
VMware Tanzu can help make your organization more secure today and prepare it for the anticipated National Institute of Standards and Technology (NIST) guidelines tomorrow.
Secure Supply Chain, with Henri van den Bulk
DevSecOps alert! Container security alert! Coté talks with Henri van den Bulk about the ideas of a “secure software supply chain.” When you’re building, running, and managing your own software,...
Delivering Container Security in Complex Kubernetes Environments
For teams struggling to achieve true DevSecOps, VMware Tanzu Advanced enables leaps in capability by delivering container compliance and transparency on day one.
It’s always been about developer productivity, SOA to DevSecOps, with Ajay Patel
VMware Tanzu’s Ajay Patel talks with Rita and Coté about the history of app servers, SOA, and how we got there to our current cloud native stacks. And, Ajay also lays out the what enterprises are...
Episode 187: DevSecOps for US Federal agencies (FIPs, STIGs, auditors, AOs, and all that)
When Federal people ask to secure a DevOps app creation and delivery process, what do they mean? Chris Willis joins Coté in this episode to answer that question with a #vmwaretanzu customer...
58:07Security as Code: A DevSecOps Approach
Security as Code (SaC) is the methodology of codifying security tests, scans, and policies. Security is implemented directly into the CI/CD pipeline to automatically and continuously detect security v
32:29Tanzu Talk: Secure Supply Chain, with Henri van den Bulk
DevSecOps alert! Container security alert! Coté talks with Henri van den Bulk about the ideas of a “secure software supply chain.” When you’re building, running, and managing your own software, how
Rethinking Security from Scratch: The Case for Shifting Container Security from the Edge to the Core
In this blog post, you will see how new DevSecOps thinking is necessary as we look at the impact a development-led change can have on your operational security.
