GitOps and CI/CD: Maintaining Security in the Age of Automa... Christian Hernandez & Hilliary Lipsig
Channel: CNCF [Cloud Native Computing Foundation]
Date: 2023-04-20

GitOps and CI/CD: Maintaining Security in the Age of Automation - Christian Hernandez & Hilliary Lipsig, Red Hat

As organizations continue to adopt GitOps and CI/CD practices to streamline their software development and deployment processes, it is crucial to also consider the security implications of these changes. In this talk, we will discuss the various security risks that can arise when using GitOps and CI/CD, and explore best practices for mitigating these risks to ensure that your pipeline remains secure. In this talk we will cover: * Securing access to your Git repository and ensuring that only authorized users can make changes * Implementing secure communication between your pipeline and your infrastructure * Automating security testing and vulnerability scanning in your pipeline * Managing secrets and sensitive data in your pipeline * Monitoring and auditing your pipeline to detect and respond to security incidents The talk will include real-world examples taken from Red Hat's SRE successful implementation of secure GitOps and CI/CD pipelines, as well as practical tips and guidelines that attendees can take away and apply to their own pipelines. By the end of this talk, attendees will have a better understanding of the security risks associated with GitOps and CI/CD and will be equipped with the knowledge and tools needed to maintain a secure pipeline.