Tanzu Talk: DevSecOps for US Federal agencies (FIPs, STIGs, auditors, AOs, and all that)

January 21, 2021

When Federal people ask to secure a DevOps app creation and delivery process, what do they mean? Chris Willis joins Coté in this episode to answer that question with a #vmwaretanzu customer example: the Tanzu Build Service, buildpacks, Tanzu Application Service (Pivotal Cloud Foundry), and other components. He covers FIPS encryption requirements, STIGs, working with the authorizing official, and the overall practices and culture-think for securing build pipelines. Get a free consultation on DevSecOps with Tanzu Labs: https://tanzu.vmware.com/office-hours?utm_source=cote&utm_medium=video&utm_campaign=TanzuTalk&utm_content=FedDevSecOps Free Forrester paper on container security: https://tanzu.vmware.com/content/analyst-reports/best-practices-for-container-security?utm_source=cote&utm_medium=video&utm_campaign=TanzuTalk&utm_content=FedDevSecOps Explainer of VMware Tanzu’s DevSecOps Tools: https://tanzu.vmware.com/content/webinars/jan-14-three-essentials-for-delivering-containers-at-scale-a-real-devsecops-approach?utm_source=cote&utm_medium=video&utm_campaign=TanzuTalk&utm_content=FedDevSecOps

Previous
Tanzu Tuesdays - Spring Native with Sébastien Deleuze
Tanzu Tuesdays - Spring Native with Sébastien Deleuze

Spring Native is a new effort from the Spring team that allows to compile Spring applications to native exe...

Next Video
How Cloud Suitability Analyzer Can Help Speed Up App Modernization
How Cloud Suitability Analyzer Can Help Speed Up App Modernization

The Cloud Suitability Analyzer tool allows you to assess your app portfolio for cloud readiness, helping yo...