Loading…
Attending this event?
September 16-18, 2024
Vienna, Austria
View More Details & Registration
Note: The schedule is subject to change.

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for Open Source Summit Europe 2024 to participate in the sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.

This schedule is automatically displayed in Central European Summer Time (UTC/GMT +2). To see the schedule in your preferred timezone, please select from the drop-down menu to the right, above "Filter by Date."

IMPORTANT NOTE: Timing of sessions and room locations are subject to change.

Tuesday September 17, 2024 16:00 - 16:40 CEST
The distributed development effort across individual teams to build secure software in a constantly evolving security threat landscape results in massive duplication of CI/CD automation work and inconsistent security and compliance postures across teams. The solution is to standardize the CI/CD security & compliance automation for development teams and centralize platform operations and maintenance. Our centralized CI/CD platform prevents software security problems from reaching production systems and streamlines compliance audits using built-in DevSecOps practices. Tekton is used as the open source orchestrator to standardize CI/CD and contribute open source enhancements through our valued ecosystem partnerships to benefit all users. The platform includes open source scanning tools such as Clair for OSS threat intelligence, SonarQube for SAST, and OWASP ZAP for DAST. The platform also extends the traditional CI and CD pipelines with a Continuous Compliance (CC) pipeline which ensures that deployed applications are scanned for new vulnerabilities on a daily basis with unique capabilities to auto remediate identified vulnerabilities and auto close resolved incident issues.
Speakers
avatar for Caroline Cameron

Caroline Cameron

DevSecOps Engineering Lead at IBM, IBM
Caroline is a DevSecOps transformation thought leader and passionate advocate for integrating secure software supply chain tools and practices early and often into the SDLC. Her background in the IBM CISO organization, and keen interest in security and compliance, keep her at the... Read More →
avatar for Tony Higham

Tony Higham

Chief Architect and Strategist - DevSecOps Transformation, IBM
With a track record as a recognized Distinguished Engineer, digital officer, and IT architect, I possess a history of delivering high-impact, innovative, customer facing solutions in the cloud applications industry. Among my talents are the ability to develop and mentor technical... Read More →
Tuesday September 17, 2024 16:00 - 16:40 CEST
Hall M2 (Level 2)
  ContainerCon
  • Audience Level Any

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Share Modal

Share this link via

Or copy link