- Популярные видео
- Авто
- Видео-блоги
- ДТП, аварии
- Для маленьких
- Еда, напитки
- Животные
- Закон и право
- Знаменитости
- Игры
- Искусство
- Комедии
- Красота, мода
- Кулинария, рецепты
- Люди
- Мото
- Музыка
- Мультфильмы
- Наука, технологии
- Новости
- Образование
- Политика
- Праздники
- Приколы
- Природа
- Происшествия
- Путешествия
- Развлечения
- Ржач
- Семья
- Сериалы
- Спорт
- Стиль жизни
- ТВ передачи
- Танцы
- Технологии
- Товары
- Ужасы
- Фильмы
- Шоу-бизнес
- Юмор
Bot Thoughts Podcast — DevSecOps in 2026: Shift Security Left Before It's Too Late
Level: Intermediate
🎙️ Bot Thoughts Podcast — Episode P032
In 2026, supply chain attacks are the #1 threat vector for software teams. The xz-utils backdoor, npm poisoning, and AI-generated code are reshaping secure software delivery. Alex and Sam break down DevSecOps in practice.
Topics covered:
• Supply chain attacks grew 430% 2023–2025
• What shift-left security actually means
• SBOM requirements and how to generate them in CI
• Minimum viable CI security pipeline: SAST, dep scanning, container scanning, IaC
• Runtime detection with Falco and eBPF
• Secrets management failures and fixes
• AI code generation security risks: prompt injection, model supply chain
• Full tooling stack: Semgrep, Trivy, Grype, Cosign, OPA Gatekeeper, Falco, Kyverno
• Adoption order for teams starting from zero
🔗 Full transcript: https://amtocsoft.blogspot.com
#DevSecOps #SupplyChainSecurity #CyberSecurity #DevOps #Kubernetes #Podcast #BotThoughts
Видео Bot Thoughts Podcast — DevSecOps in 2026: Shift Security Left Before It's Too Late канала Toc am
🎙️ Bot Thoughts Podcast — Episode P032
In 2026, supply chain attacks are the #1 threat vector for software teams. The xz-utils backdoor, npm poisoning, and AI-generated code are reshaping secure software delivery. Alex and Sam break down DevSecOps in practice.
Topics covered:
• Supply chain attacks grew 430% 2023–2025
• What shift-left security actually means
• SBOM requirements and how to generate them in CI
• Minimum viable CI security pipeline: SAST, dep scanning, container scanning, IaC
• Runtime detection with Falco and eBPF
• Secrets management failures and fixes
• AI code generation security risks: prompt injection, model supply chain
• Full tooling stack: Semgrep, Trivy, Grype, Cosign, OPA Gatekeeper, Falco, Kyverno
• Adoption order for teams starting from zero
🔗 Full transcript: https://amtocsoft.blogspot.com
#DevSecOps #SupplyChainSecurity #CyberSecurity #DevOps #Kubernetes #Podcast #BotThoughts
Видео Bot Thoughts Podcast — DevSecOps in 2026: Shift Security Left Before It's Too Late канала Toc am
Комментарии отсутствуют
Информация о видео
24 апреля 2026 г. 13:26:03
00:16:51
Другие видео канала





















