DevSecOps Worst Practices

Slides: https://static.sched.com/hosted_files/owasp2023globalappsecwashin/0a/Global_AppSec_DC_Tanya%20Janca%20DevSecOps%20Wrost%20Practices.pptx

Quite often when we read best practices we are told ‘what’ to do, but not the ‘why’. When we are told to ensure there are no false positives in the pipeline, the reason seems obvious, but not every part of DevOps is that intuitive, and not all ‘best practices’ make sense on first blush. Let’s explore tried, tested, and failed methods, and then flip them on their head, so we know not only what to do to avoid …

best practices devops false positives pipeline practices