↓ Skip to main content
Romano Roth
  1. Tags/

Best Practices

GitHub DevSecOps Part 12: Our Recommendations and Lessons Learned

·5 mins
DevSecOps GitHub CI/CD DevOps Best Practices Lessons Learned GitHub Actions Vulnerability Management
After eleven sessions building a full DevSecOps pipeline with GitHub — covering Software Composition Analysis, License Compliance, SAST, Container Scanning, Secret Detection, DAST, Pull Requests, Scheduled Pipelines, and Vulnerability Management — Patrick Steger and I close the series with our recommendations. What works on GitHub, where the gaps are, and what we would tell anyone setting out to build the same pipeline.

GitLab DevSecOps Part 12: Our Recommendations and Lessons Learned

·4 mins
DevSecOps GitLab CI/CD DevOps Best Practices Lessons Learned Vulnerability Management Secret Management
After eleven sessions building a full DevSecOps pipeline with GitLab — from Software Composition Analysis to Container Scanning, SAST, Secret Detection, DAST, merge request integration, and scheduled pipelines — Patrick Steger and I close the series with our recommendations. What worked, what tripped us up, and what we would tell anyone setting out to build the same pipeline today.

How to start a DevOps transformation

·3 mins
DevOps Transformation Change Management Leadership Culture Agile Software Engineering Best Practices Continuous Improvement
At first glance, a DevOps transformation seems to be a major undertaking for any company. But with the right approach, you can keep the process lean and agile. Insight in brief # Start small with a small to medium sized project or product. Select the right people to ensure sufficient credibility and influence. Continuous improvement is key to success.