Locking Down GitFlow with GitHub, GitLab, and Azure DevOps

preview_player
Показать описание
Part 1 of 3 in the Cloud Security and DevSecOps webcast series.

As cloud, security, and operations teams move to DevOps workflows, understanding GitFlow and how to harden version control systems is critical. In this webcast, SEC540 author and instructor will demonstrate how a GitLab version control misconfiguration can allow a CI/CD pipeline to be compromised and result in malware being deployed to the build server. We will then review the security controls available in the GitHub, GitLab, and Azure DevOps version control systems which could have prevented the attack.

Speaker Bio
Рекомендации по теме