From the course: DevOps Foundations: DevSecOps

Unlock the full course today

Join today to access over 24,800 courses taught by industry experts.

Shifting security to the left

Shifting security to the left

- [Instructor] Let's talk about shifting security to the left. We hear a lot about that in the IT industry today, but what does that actually mean when we shift things to the left? In security, that means taking a lot of the things that we used to do in QA or in production or later in the life cycle and moving it closer to the development phase. This goes along a lot with what we talked about in the first chapter. Most of the people tend to perform testing at the end or at scattered times throughout the life cycle. When we move security to the left, we take things that we used to do in production like vulnerability scanning, or in QA like static and dynamic scanning or interactive scanning. And we move those to the development phase. Just like everything else in DevOps, security has to be moved to the left. It has to be done more quickly. It has to be done by the development team and then they have to own it. The…

Contents