Sonatype

devops all day devops capital one ansible continuous delivery sonatype docker puppet jenkins rugged devops chef devsecops owasp open source systems hardening security policy iam intuit kms blue team aws kms security monitoring multi-security checkpoints red team mesosphere container orchestrator refactor aws lambda rancher labs infrastructure as code immutable infrastructure microservices refactoring aws serverless kubernetes continuous deployment enterprise transformations bamboo meta infrastructure as code monolithic architectures continuous everyone roles devops legacy apps teamcity waterfall legacy apps culture tools application security fannie mae marathon infrastructure open source governance software security risks agile secure devops purpose automating security security open source security monitoring containers sonatype nexus nexus maven java agile software development open source development software development information security component security nexus pro component lifecycle management reference architecture support server continuous pipeline automated security code policy jira josh corman devopssec gene kim appdev mark miller appsec chris eng component vulnerabilities oss security risks software development risks repository management repository manager sdlc ci/cd devsevops nexus repository nexus firewall nexus lifecycle threadfix nessus owasp depedency check gaunltl find bugs owasp zap aqua contrast twistlock sonarqube hp fortify application development discovery alerting continuous integration servers google terraform static analysis architecture pipeline stacking codes software compliance software testing platform checkpoint forensics clustering application docker hub docker private registry policy guidelines success eclipse gradle sonar software supply chains rundeck ant software supply chain automation rsa dell deming artifactory artifact repository 2015 jez humble github subversion continuous integraton software supply chain supply chain vulnerable components clm europe joshua corman security news infosec matt tesauro game show data breaches heartbleed risk management struts pci requirements component repository repository