

DSO Overflow
Glenn Wilson, and Steve Giguere
In this podcast, we speak with professionals working in cyber security, software engineering and operations to talks about a number of DevSecOps topics. We discuss how organisations factor security into their product delivery cycles without compromising the value of doing DevOps and Agile.
Episodes
Mentioned books

Apr 24, 2021 • 40min
Ep09: DevOps meets Security
DevOps meets Security.London DevOps meets DevSecOps - London Gathering. https://www.meetup.com/London-DevOps/Speakers Bio:Matt Saunders is a technical operations leader, using Devops and continuous delivery to help teams deliver quality software quickly and efficiently. He is also co-organiser of the London DevOps meetup - a group with over 8,000 members which meets monthly.https://www.linkedin.com/in/msaunders/Marc Cluet is a Senior Partner Solutions Engineer at Hashicorp and has over 25 years of experience in the Industry. Heis one of the organisers of London DevOps which is the second biggest DevOps meetup in the world, he also helps organise DevOps Exchange Barcelona and Barcelona Big Data and is a DevOps Institute Ambassador.https://www.linkedin.com/in/marccluet/

Apr 5, 2021 • 48min
Ep08:Kubernetes Exam Cram
We have the pleasure to have Steve Giguere and Michael Foster, the hosts from Clust3rF8ck, to share with us their experience cramming in all the relevant materials to take both the CKA (Kubernetes Administrator) and CKS (Kubernetes Security Specialist) examshttps://www.twitch.tv/clust3rf8ckhttps://www.cncf.io/certification/cka/https://www.cncf.io/certification/cks/Speakers Bio:Steve Giguere is a dedicated DevSecOps community champion, securing cloud native applications. In addition to Clust3rF8ck, he has a podcast called CoSeCast and represents the UK at playing Ultimate Frisbee.https://www.linkedin.com/in/stevegiguere/https://twitter.com/_SteveGiguere_Michael Foster is a Cloud Native Advocate at StackRox, a Kubernetes native security application. Michael's consulting background instilled the importance of selecting the right tool for the job and creating healthy communities for growth. His work allows him to review, discuss, and contribute to the CNCF ecosystem through various media forms.As a co-organizer of the Kubernetes & Cloud Native Security Meetups, Michael enjoys helping people become more security-focused during their Cloud native journey.https://www.linkedin.com/in/mfosterche/https://twitter.com/IdealUsrname

Feb 18, 2021 • 36min
Ep07:Using Rego to define your policies
In this episode we invited Anders from the Open Policy Agent project and Alex one of the masterminds behind a new opensource project called KICS.OpenSource ProjectsKICS - Keep your Infrastructure as Code Secure: https://kics.io/Styra Academy: https://academy.styra.com/Rego Playground: https://play.openpolicyagent.org/Official Docs: https://www.openpolicyagent.org/docs/latest/OPA Blog: https://blog.openpolicyagent.org/Guest Detailshttps://www.linkedin.com/in/anderseknert/https://www.linkedin.com/in/roichman/

Sep 12, 2020 • 41min
Ep06: Checkov
In this episode I have the pleasure of talking to James and Corcoran - two very talented individuals when it comes to Infrastructure as Code as well as all things DevOps; in addition we have Barak the CTO of Bridgecrew the company behind the opensource project - CheckovCheckov details:https://www.checkov.io/1.Introduction/Getting%20Started.html### DevSecOps - London Gathering ###https://dso-lg.comhttps://dso-overflow.comAlso follow us on Twitter: @DevSecOps_LG

Sep 12, 2020 • 46min
Ep05: Semgrep
In this episode I have the pleasure of talking to Clint from R2C - a software security startup from the US. They are championing an open source project called semgrep. I will be exploring what this is and how it is modernising SAST. Semgrep details:https://semgrep.dev/### DevSecOps - London Gathering ###https://dso-lg.comhttps://dso-overflow.comAlso follow us on Twitter: @DevSecOps_LG

Sep 12, 2020 • 49min
Ep04: Secure Delivery Playbook
In this episode I have invited Stuart and James who are the project leads behind the Secure Delivery Playbook. This is a distilled version of their various client engagements when incorporating security into their development.Secure Delivery Playbook details:https://secure-delivery.playbook.ee/### DevSecOps - London Gathering ###https://dso-lg.comhttps://dso-overflow.comAlso follow us on Twitter: @DevSecOps_LG

May 17, 2020 • 27min
Ep03: Experimenting with and adopting AWS Lambda (Matthew Joyce)
In this episode, Matthew Joyce shares his experience with taking on AWS Lamdba for one of his projects.Matthew's details:https://www.linkedin.com/in/matthew-joyce-1301772/### DevSecOps - London Gathering ###https://dso-lg.comhttps://dso-overflow.comAlso follow us on Twitter: @DevSecOps_LG

May 10, 2020 • 27min
Ep02: Passing a DSO Online Course (Emily Young)
In this episode, I speak to Emily Young who has embarked on the Certified DevSeOps Professional online course and the gruelling twelve hour exam.Emily's details:https://www.linkedin.com/in/emily-young-a3a77255/@Ra1nb0wAn4lyst### DevSecOps - London Gathering ###https://www.meetup.com/DevSecOps-London-Gathering/Also follow us on Twitter: @DevSecOps_LG

Nov 24, 2019 • 27min
Ep01: terraform-compliance with Emre Erkunt
In this episode I have the pleasure of talking to Emre Erkunt - he is an independent consultant and the founder of an opensource project called Terraform-Compliance. Look out for the black falcon logo. Stickers available in our next Gathering.Emre's details:https://terraform-compliance.com/@3rkunt### DevSecOps - London Gathering ###https://www.meetup.com/DevSecOps-London-Gathering/Also follow us on Twitter: @DevSecOps_LG


