{"id":10841,"date":"2021-07-28T09:33:04","date_gmt":"2021-07-28T07:33:04","guid":{"rendered":"https:\/\/whiteduck.de\/?p=10841"},"modified":"2021-11-23T13:40:06","modified_gmt":"2021-11-23T12:40:06","slug":"recap-microsoft-devops-forum-2021-devops-security","status":"publish","type":"post","link":"https:\/\/whiteduck.de\/en\/recap-microsoft-devops-forum-2021-devops-security\/","title":{"rendered":"Recap: Microsoft DevOps Forum 2021 \u2013 DevOps & Security"},"content":{"rendered":"

<\/div>
<\/div>
<\/div><\/div><\/div>

<\/p>\n

Recap: Microsoft DevOps Forum 2021 \u2013 DevOps & Security<\/p>\n

<\/h1><\/div>

<\/div><\/p>\n\n\n

Earlier this month I had the honor to speak at the second Microsoft DevOps Forum<\/a>. This time with a Focus on DevSecOps. <\/p>\n\n\n\n

The featured talks covered everything from the basics of DevSecOps to details like how to achieve higher security by using features and best practices provided by Microsoft Azure<\/a> and GitHub<\/a>. These ranged from Azure Security Center<\/a>, Azure Sentinel<\/a>, GitHub CodeQL and other GitHub Advanced Security<\/a> features to open source tools. <\/p>\n\n\n\n

\"DevSecOps<\/figure><\/div>\n\n\n\n

My talk was focused on DevSecOps for small and medium teams and businesses and how they can start their Cloud Security Journey by introducing first security features using quick wins.<\/p>\n\n\n\n

“Start small and grow”<\/p><\/blockquote>\n\n\n\n

This is one of the most important aspects. When starting with DevSecOps you should focus on best practices and quick wins first. This helps you to introduce cloud security into your workflows without slowing down your teams. It also helps you to get the first parts into production fast (where they can help you) instead of iterating on a theoretical big picture. Then iterate and introduce more security features over time.<\/p>\n\n\n\n

“Shift left”<\/p><\/blockquote>\n\n\n\n

Second, try to implement DevSecOps through the whole DevOps cycle. Do not limit security to the operation stage. Try to move security as far to the left as possible. Also, integrate it into all DevOps stages. Raise awareness of security with your entire team to design your application architecture with security in mind. Run code analysis in Pull Requests to detect security vulnerabilities before they get merged into the main branch. These are just some of numerous examples.<\/p>\n\n\n\n

Don’t miss to check out my slides to gain even more useful insights:<\/p>\n\n\n\n

\n

You are currently viewing a placeholder content from Default<\/strong>. To access the actual content, click the button below. Please note that doing so will share data with third-party providers.<\/p>

Unblock content<\/a> Accept required service and unblock content<\/a> <\/div> More Information<\/a> <\/div><\/div>\n<\/div><\/figure>\n\n\n\n

Also, don’t miss to replay the whole event including all talks (German only) by registering here<\/a>. <\/p>\n","protected":false},"excerpt":{"rendered":"

Earlier this month I had the honor to speak at the second Microsoft DevOps Forum. This time with a Focus on DevSecOps. The featured talks covered everything from the basics of DevSecOps to details like how to achieve higher security by using features and best practices provided by Microsoft Azure and GitHub. These ranged from <\/p>\n

[…]<\/div>\n

<\/a><\/p>\n","protected":false},"author":8,"featured_media":10851,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_tribe_events_control_status":"","_tribe_events_control_status_canceled_reason":"","_tribe_events_control_status_postponed_reason":"","_tribe_events_control_online":"","_tribe_events_control_online_url":"","footnotes":""},"categories":[],"tags":[113,229,110,409],"class_list":["post-10841","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","tag-azure","tag-community","tag-devops","tag-devsecops"],"yoast_head":"\nRecap: Microsoft DevOps Forum 2021 \u2013 DevOps & Security - white duck<\/title>\n<meta name=\"description\" content=\"DevOps practices for small teams and organizations, with a focus on security DevSecOps.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/whiteduck.de\/en\/recap-microsoft-devops-forum-2021-devops-security\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Recap: Microsoft DevOps Forum 2021 \u2013 DevOps & Security - white duck\" \/>\n<meta property=\"og:description\" content=\"DevOps practices for small teams and organizations, with a focus on security DevSecOps.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/whiteduck.de\/en\/recap-microsoft-devops-forum-2021-devops-security\/\" \/>\n<meta property=\"og:site_name\" content=\"white duck\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/whiteduckgmbh\" \/>\n<meta property=\"article:published_time\" content=\"2021-07-28T07:33:04+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-11-23T12:40:06+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/whiteduck.de\/wp-content\/uploads\/devsecops.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1818\" \/>\n\t<meta property=\"og:image:height\" content=\"839\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Nico Meisenzahl\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@whiteduck_gmbh\" \/>\n<meta name=\"twitter:site\" content=\"@whiteduck_gmbh\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Nico Meisenzahl\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/whiteduck.de\\\/en\\\/recap-microsoft-devops-forum-2021-devops-security\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/whiteduck.de\\\/en\\\/recap-microsoft-devops-forum-2021-devops-security\\\/\"},\"author\":{\"name\":\"Nico Meisenzahl\",\"@id\":\"https:\\\/\\\/whiteduck.de\\\/en\\\/#\\\/schema\\\/person\\\/c26beb86db4a71e77e24854ed07eda69\"},\"headline\":\"Recap: Microsoft DevOps Forum 2021 \u2013 DevOps & Security\",\"datePublished\":\"2021-07-28T07:33:04+00:00\",\"dateModified\":\"2021-11-23T12:40:06+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/whiteduck.de\\\/en\\\/recap-microsoft-devops-forum-2021-devops-security\\\/\"},\"wordCount\":530,\"image\":{\"@id\":\"https:\\\/\\\/whiteduck.de\\\/en\\\/recap-microsoft-devops-forum-2021-devops-security\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/whiteduck.de\\\/wp-content\\\/uploads\\\/devsecops.jpg\",\"keywords\":[\"Azure\",\"community\",\"DevOps\",\"DevSecOps\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/whiteduck.de\\\/en\\\/recap-microsoft-devops-forum-2021-devops-security\\\/\",\"url\":\"https:\\\/\\\/whiteduck.de\\\/en\\\/recap-microsoft-devops-forum-2021-devops-security\\\/\",\"name\":\"Recap: Microsoft DevOps Forum 2021 \u2013 DevOps & Security - white duck\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/whiteduck.de\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/whiteduck.de\\\/en\\\/recap-microsoft-devops-forum-2021-devops-security\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/whiteduck.de\\\/en\\\/recap-microsoft-devops-forum-2021-devops-security\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/whiteduck.de\\\/wp-content\\\/uploads\\\/devsecops.jpg\",\"datePublished\":\"2021-07-28T07:33:04+00:00\",\"dateModified\":\"2021-11-23T12:40:06+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/whiteduck.de\\\/en\\\/#\\\/schema\\\/person\\\/c26beb86db4a71e77e24854ed07eda69\"},\"description\":\"DevOps practices for small teams and organizations, with a focus on security DevSecOps.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/whiteduck.de\\\/en\\\/recap-microsoft-devops-forum-2021-devops-security\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/whiteduck.de\\\/en\\\/recap-microsoft-devops-forum-2021-devops-security\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/whiteduck.de\\\/en\\\/recap-microsoft-devops-forum-2021-devops-security\\\/#primaryimage\",\"url\":\"https:\\\/\\\/whiteduck.de\\\/wp-content\\\/uploads\\\/devsecops.jpg\",\"contentUrl\":\"https:\\\/\\\/whiteduck.de\\\/wp-content\\\/uploads\\\/devsecops.jpg\",\"width\":1818,\"height\":839,\"caption\":\"security camera\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/whiteduck.de\\\/en\\\/recap-microsoft-devops-forum-2021-devops-security\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Startseite\",\"item\":\"https:\\\/\\\/whiteduck.de\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Recap: Microsoft DevOps Forum 2021 \u2013 DevOps & Security\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/whiteduck.de\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/whiteduck.de\\\/en\\\/\",\"name\":\"white duck\",\"description\":\"Your Partner for Microsoft Azure & AI\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/whiteduck.de\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/whiteduck.de\\\/en\\\/#\\\/schema\\\/person\\\/c26beb86db4a71e77e24854ed07eda69\",\"name\":\"Nico Meisenzahl\",\"description\":\"Nico Meisenzahl works as Senior Cloud & DevOps Consultant at white duck. As an elected Microsoft MVP, Docker Community Leader and GitLab Hero, his current passion is for topics around Cloud-Native and Kubernetes. Nico is a frequent speaker at conferences, user group events and Meetups in Europe and the United States.\",\"sameAs\":[\"https:\\\/\\\/meisenzahl.org\",\"https:\\\/\\\/www.linkedin.com\\\/in\\\/nicomeisenzahl\\\/\"],\"url\":\"https:\\\/\\\/whiteduck.de\\\/en\\\/author\\\/nmeisenzahl\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Recap: Microsoft DevOps Forum 2021 \u2013 DevOps & Security - white duck","description":"DevOps practices for small teams and organizations, with a focus on security DevSecOps.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/whiteduck.de\/en\/recap-microsoft-devops-forum-2021-devops-security\/","og_locale":"en_US","og_type":"article","og_title":"Recap: Microsoft DevOps Forum 2021 \u2013 DevOps & Security - white duck","og_description":"DevOps practices for small teams and organizations, with a focus on security DevSecOps.","og_url":"https:\/\/whiteduck.de\/en\/recap-microsoft-devops-forum-2021-devops-security\/","og_site_name":"white duck","article_publisher":"https:\/\/www.facebook.com\/whiteduckgmbh","article_published_time":"2021-07-28T07:33:04+00:00","article_modified_time":"2021-11-23T12:40:06+00:00","og_image":[{"width":1818,"height":839,"url":"https:\/\/whiteduck.de\/wp-content\/uploads\/devsecops.jpg","type":"image\/jpeg"}],"author":"Nico Meisenzahl","twitter_card":"summary_large_image","twitter_creator":"@whiteduck_gmbh","twitter_site":"@whiteduck_gmbh","twitter_misc":{"Written by":"Nico Meisenzahl","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/whiteduck.de\/en\/recap-microsoft-devops-forum-2021-devops-security\/#article","isPartOf":{"@id":"https:\/\/whiteduck.de\/en\/recap-microsoft-devops-forum-2021-devops-security\/"},"author":{"name":"Nico Meisenzahl","@id":"https:\/\/whiteduck.de\/en\/#\/schema\/person\/c26beb86db4a71e77e24854ed07eda69"},"headline":"Recap: Microsoft DevOps Forum 2021 \u2013 DevOps & Security","datePublished":"2021-07-28T07:33:04+00:00","dateModified":"2021-11-23T12:40:06+00:00","mainEntityOfPage":{"@id":"https:\/\/whiteduck.de\/en\/recap-microsoft-devops-forum-2021-devops-security\/"},"wordCount":530,"image":{"@id":"https:\/\/whiteduck.de\/en\/recap-microsoft-devops-forum-2021-devops-security\/#primaryimage"},"thumbnailUrl":"https:\/\/whiteduck.de\/wp-content\/uploads\/devsecops.jpg","keywords":["Azure","community","DevOps","DevSecOps"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/whiteduck.de\/en\/recap-microsoft-devops-forum-2021-devops-security\/","url":"https:\/\/whiteduck.de\/en\/recap-microsoft-devops-forum-2021-devops-security\/","name":"Recap: Microsoft DevOps Forum 2021 \u2013 DevOps & Security - white duck","isPartOf":{"@id":"https:\/\/whiteduck.de\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/whiteduck.de\/en\/recap-microsoft-devops-forum-2021-devops-security\/#primaryimage"},"image":{"@id":"https:\/\/whiteduck.de\/en\/recap-microsoft-devops-forum-2021-devops-security\/#primaryimage"},"thumbnailUrl":"https:\/\/whiteduck.de\/wp-content\/uploads\/devsecops.jpg","datePublished":"2021-07-28T07:33:04+00:00","dateModified":"2021-11-23T12:40:06+00:00","author":{"@id":"https:\/\/whiteduck.de\/en\/#\/schema\/person\/c26beb86db4a71e77e24854ed07eda69"},"description":"DevOps practices for small teams and organizations, with a focus on security DevSecOps.","breadcrumb":{"@id":"https:\/\/whiteduck.de\/en\/recap-microsoft-devops-forum-2021-devops-security\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/whiteduck.de\/en\/recap-microsoft-devops-forum-2021-devops-security\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/whiteduck.de\/en\/recap-microsoft-devops-forum-2021-devops-security\/#primaryimage","url":"https:\/\/whiteduck.de\/wp-content\/uploads\/devsecops.jpg","contentUrl":"https:\/\/whiteduck.de\/wp-content\/uploads\/devsecops.jpg","width":1818,"height":839,"caption":"security camera"},{"@type":"BreadcrumbList","@id":"https:\/\/whiteduck.de\/en\/recap-microsoft-devops-forum-2021-devops-security\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Startseite","item":"https:\/\/whiteduck.de\/en\/"},{"@type":"ListItem","position":2,"name":"Recap: Microsoft DevOps Forum 2021 \u2013 DevOps & Security"}]},{"@type":"WebSite","@id":"https:\/\/whiteduck.de\/en\/#website","url":"https:\/\/whiteduck.de\/en\/","name":"white duck","description":"Your Partner for Microsoft Azure & AI","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/whiteduck.de\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/whiteduck.de\/en\/#\/schema\/person\/c26beb86db4a71e77e24854ed07eda69","name":"Nico Meisenzahl","description":"Nico Meisenzahl works as Senior Cloud & DevOps Consultant at white duck. As an elected Microsoft MVP, Docker Community Leader and GitLab Hero, his current passion is for topics around Cloud-Native and Kubernetes. Nico is a frequent speaker at conferences, user group events and Meetups in Europe and the United States.","sameAs":["https:\/\/meisenzahl.org","https:\/\/www.linkedin.com\/in\/nicomeisenzahl\/"],"url":"https:\/\/whiteduck.de\/en\/author\/nmeisenzahl\/"}]}},"_links":{"self":[{"href":"https:\/\/whiteduck.de\/en\/wp-json\/wp\/v2\/posts\/10841","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/whiteduck.de\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/whiteduck.de\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/whiteduck.de\/en\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/whiteduck.de\/en\/wp-json\/wp\/v2\/comments?post=10841"}],"version-history":[{"count":0,"href":"https:\/\/whiteduck.de\/en\/wp-json\/wp\/v2\/posts\/10841\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/whiteduck.de\/en\/wp-json\/wp\/v2\/media\/10851"}],"wp:attachment":[{"href":"https:\/\/whiteduck.de\/en\/wp-json\/wp\/v2\/media?parent=10841"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/whiteduck.de\/en\/wp-json\/wp\/v2\/categories?post=10841"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/whiteduck.de\/en\/wp-json\/wp\/v2\/tags?post=10841"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}