Module 4 Summary

00:00

this is less than 4.7, where we reach the end of module force. Let's just recap what we learned.

00:08

So I talked about the beginning doing or what pipeline orchestration means specifically in continuous integration. Continuous delivery

00:15

talked about the agile development and how this impacts security and how we need to, as security

00:23

people integrate into that and be able to move at the same pace as a development and automate without with our tools.

00:31

We talked about some of the tools and activities for development and build because that's the stage we're talking about right now.

00:37

Looked at some of the open source static analysis tools, and we actually actually showed them demoed them and Jenkins and how we've now added our heart pipeline. We had ecstatic analysis and software composition analysis and

00:50

through Swiss spot bugs with awas dependency check. We also did some stylistic checking,

00:57

and they introduced the Death SEC ops maturity model that we're going to use again throughout the modules just to give a plan of Here's what we're doing or here's Here's how you can improve your pipeline for def SEC ops,

01:08

And we also talked about third party libraries how we cannot analyze them, why it's important and why we should be looking at it specifically through the supply chain and protecting this code and these libraries that were injecting into our applications

01:25

of the final quiz here. It wasn't it wasn't addressed in this topic are in this module, but we've mentioned a couple times and that might be interested. So

01:34

Kubernetes is a is a product for what purpose

01:37

is it a four Lin based evaluation? Is it for container orchestration or is it for configuration management?

01:47

I figured I would just take the description directly from the Kubernetes website, so they they describe themselves as kubernetes is an open source system for automating deployment, scaling and management and containerized applications. It groups containers that that make up any application to a logical units for easy management and discovery.

02:06

That's a lot.

02:07

It just It's the orchestration of the the containers and making true their load balance that running. Are they healthy? You canoe patching on them