Episode 40: Shifting security left

https://is1-ssl.mzstatic.com/image/thumb/Podcasts221/v4/a7/09/43/a70943cd-47d0-557e-f161-5f4ebff30f15/mza_13343180789918728806.jpg/600x600bb.jpg

Off Script

Hey! Presents

55 episodes

1 month ago

Hosted by CTOs Josh Nesbitt and James Hall, Off Script brings you unfiltered conversations about the highs, lows, and lessons of working in tech today. From leading engineering teams and scaling companies, to tackling burnout, bad bets, and breakthrough ideas, this is the show where raw honesty meets experience. Alongside one-on-one conversations between Josh and James, you’ll hear from leaders, builders, designers, and entrepreneurs who aren’t afraid to share what’s really going on behind the scenes — the conversations usually left for DMs, side chats, and after-hours drinks. Whether you’re building your first product or leading a fast-growing team, Off Script gives you a raw and refreshing perspective on the challenges and creativity that shape modern tech. New episodes every few weeks. Subscribe and join the conversation.

All content for Off Script is the property of Hey! Presents and is served directly from their servers with no modification, redirects, or rehosting. The podcast is not affiliated with or endorsed by Podjoint in any way.

Episode 40: Shifting security left

Off Script

24 minutes 50 seconds

1 year ago

Episode 40: Shifting security left

Inspired by reading ‘Investments Unlimited’ and other books built around the principles of storytelling, James and Josh dive into DevSecOps and the bigger picture of shifting security left in this new episode of Off Script!

In this episode:

00:00 Fictional Bugs - Investments Unlimited
01:00 DevSecOps
02:00 Moving security testing to the beginning
03:00 Reducing the friction of releases
04:00 Go through pain points early
05:00 Strict linting, function length, no unused variables
06:00 Early automated tests to prevent Git leaks
08:00 Making it easy for the developer
10:00 Bearer
11:00 Concise reporting
12:00 Dependabot
13:00 Secret Management
14:00 Making it easy to do the right thing
16:00 Having pride in your security
17:00 What if your language doesn’t have much security support?
19:00 Dynamic & Static languages
20:00 Language agnostic tools
21:00 Key takeaways

References:

Find out more about Stac and Parallax: