cdCon 2022: Full Schedule

Austin, Texas | June 7-8, 2022
View More Details & Registration

The schedule is subject to change.

Please note all session times are listed in Central Daylight Time (CDT), UTC -5.
To view the schedule at your preferred time, please choose your location on the right-hand navigation panel under ’Timezone’.

9:00am CDT

[VIRTUAL SESSION] Cloud Security in Continuous Delivery - Chen Goldberg, CloudWize

One of the biggest challenges is making sure the continuous integration processes in the cloud are made easy to use and straightforward to all stakeholders involved and in charge of the security. In this session, we’ll explore continuous delivery and security in the cloud, the different stakeholders as CloudOps, DevOps, SREs, Cloud architects, RNDs, and DevSecOps. Chen will also include examples of the challenges and repercussions. We’ll explore the following points: - Setting clear responsibilities between the stakeholders. - What you need to look for in a tool to simplify the process, help protect the cloud and keep up with continuous delivery. - Organized and centralized logs and threats management. Numerous options to handle them. - How to use an autonomous risk management system.

Speakers

Chen Goldberg

CEO, CloudWize

15 years of experience in development and operation, building infrastructure and implementing best practices in start-ups and enterprise companies, leadership roles as managed production Cloud Environments. Speaking opportunities: I participated in a live webinar and podcast and gave... Read More →

PDF Cloud Security in Continuous Delivery pdf

Tuesday June 7, 2022 9:00am - 9:30am CDT
Virtual Track

Virtual Sessions, Cloud Native Continuous Delivery

Technology Focus CD Events
Presentation Slides Attached Yes

9:00am CDT

[VIRTUAL SESSION] Continuous Software Delivery using Jenkins, Spinnaker and Terraform Cloud on Amazon EKS - Irshad A Buchh & Paul Roberts, Amazon Web Services

Customers running microservices-based applications on Amazon Elastic Kubernetes Service (Amazon EKS) are looking for guidance on architecting complete end-to-end CI and CD pipelines using Jenkins and Spinnaker. Jenkins is a very popular CI server with great community support and many plugins (Slack, GitHub, Docker, Build Pipeline) available. Spinnaker provides automated release, built-in deployment, and supports blue/green deployment out of the box. This talk will explore configuration of Jenkins on Amazon EC2 using Terraform Cloud. Irshad shall also discuss the creation of Spinnaker pipelines, a combination of stages that enable powerful coordination for Continuous Software Delivery. These pipelines can be started manually or can be automatically triggered by an event, such as a new Docker image appearing in the Docker registry.

Speakers

Irshad A Buchh

Principal Solutions Architect, Amazon Web Services

Irshad A Buchh is a Principal Solutions Architect at Amazon Web Services. Irshad is a trusted advisor to AWS most strategic global partners, educating them on the value proposition of AWS cloud and participating in deep architectural discussions to ensure their solutions are designed... Read More →

Paul Roberts

Senior Principal Solutions Architect, Amazon Web Services

Paul Roberts is a Senior Principal Solutions Architect at Amazon Web Services. Paul is an extremely technical and seasoned technologist who has spent the last decade engineering and implementing large scale infrastructure and security architectures for organizations of all sizes... Read More →

Continuous Software Delivery Jenkins Spinnaker Terraform cdCon2022 pdf

Tuesday June 7, 2022 9:00am - 9:30am CDT
Virtual Track

Virtual Sessions

Technology Focus Jenkins, Spinnaker
Presentation Slides Attached Yes

9:00am CDT

[VIRTUAL SESSION] What a Life! - Understanding the Lifecycle of a Tekton Pipeline - Vibhav Bobade, Lifesaver Inc & Billy Lynch, Google

Tekton leverages Kubernetes to execute user CI/CD workloads -- but how does this work? In this talk, we will dive into how Tekton processes Tasks -- how they are transformed into running Pods, how steps coordinate with each other, what security considerations Tekton puts in place, and how other Tekton tools hook into this lifecycle for debuggability and software supply chain security. Come get a better understanding of how Tekton Pipelines work today, and get a peek at what problems we want to tackle next to further secure user workloads.

Speakers

Billy Lynch

Senior Software Engineer, Google

Billy is a senior software engineer at Google, focusing on securing CI/CD and software supply chains on the Tekton project. Over the years, he has contributed to many developer tooling projects at Google including Google Code, Cloud Source Repositories, and Cloud Build.

Vibhav Bobade

Open Source Integrations Engineer, Uffizzi

Vibhav Bobade works as a Open Source Integrations Engineer at Uffizzi working on interoperability. He is into retro game systems, programmatic art, running, and playing the guitar.

Tuesday June 7, 2022 9:00am - 9:30am CDT
Virtual Track

Virtual Sessions

Technology Focus Tekton

9:40am CDT

[VIRTUAL SESSION] 25 Years of (mistakes) Learning in CI/CD - Laurent Tardif, Zenika

From clearcase to modern deployment. In this talk Laurent will present a overview on how tools and practices evolve over the last 25 years. He will cover of we move from a monthly centralized team build to a distributed and continuous deployment model. How tests have impacted deployment model, how devops, docker, kube have influenced the evolution. How automation is critical today and why we continue to do the same error like depending of dynamics external dependencies in 'secure' projects.

Speakers

Laurent Tardif

Zenika Grenoble CTO, Zenika

Today I help company to move to implements better devops, craft concepts. I start my devops journey in 2000, starting to implement unit test and continuous build with continuum, some years ago. Build master during some years, kind of devops engineers at yahoo deploying a datacenter... Read More →

25 years of (errors) learning in Continuous Integration pdf

Tuesday June 7, 2022 9:40am - 10:10am CDT
Virtual Track

Virtual Sessions

Technology Focus Other
Presentation Slides Attached Yes

9:40am CDT

[VIRTUAL SESSION] Abusing CI/CD - Top Ways to Reach Production - Omer Gil, Cider Security

CI/CD pipelines are becoming one of the most exploited paths into internal and production systems by attackers, as there are a growing number of vectors that can be manipulated to gain access that are often times still left completely exposed, despite being well-known. From unexpected webhooks requests, to bypassing branch protection rules, through more complex attack scenarios like Poisoned Pipeline Execution - attackers have found that CI/CD is a quick way to invoke malicious attacks on production code. This talk will walk you through common attack vectors in CI/CD pipelines - ones you’re probably aware of, and ones that require more attention and research, and some of the ways you can harden your systems to prevent unwanted access to your sensitive internal data. Real-world attack scenarios will be showcased as part of the session.

Speakers

Omer Gil

Director of Research, Cider Security

Omer is a seasoned application and cloud security expert with 15 years of experience across multiple security disciplines. An experienced researcher and public speaker, Omer discovered the Web Cache Deception attack vector in 2017, and co-authored the “Top 10 CI/CD Security... Read More →

Abusing CICD Top Ways To Reach Production Omer Gil cdCon 2022 pdf

Tuesday June 7, 2022 9:40am - 10:10am CDT
Virtual Track

Virtual Sessions

Technology Focus Other
Presentation Slides Attached Yes

9:40am CDT

[VIRTUAL SESSION] How we Build CI/CD Observability with OpenTelemetry - Michael Friedrich, GitLab

CI/CD Pipelines are blocked, resources are drained, and the cloud invoice for the deployment is going wild - where do you start analysing and troubleshooting? One look leads into the CI/CD pipeline: Next to the job runs, which preparation steps happen, how many context switches are encountered, and which step is actually causing the problems?

Logs and metrics help to see the bigger picture, collecting the job and pipeline execution times, or fetch times for resources. Traces with spans provide more context on executed jobs, enriched with troubleshooting metadata. It is not always DNS, sometimes it’s also the slow IO cache …

Join this talk to learn how we build CI/CD Observability with OpenTelemetry in GitLab. You can learn more about the architecture challenges, implementation approaches, and performance scaling requirements for SaaS platforms.

Speakers

Michael Friedrich

Senior Developer Evangelist, GitLab

Michael Friedrich is a Senior Developer Evangelist at GitLab, focussing on Observability, DevSecOps, AI. He loves to educate everyone and regularly speaks at events and meetups. Michael created o11y.love as an Observability learning platform, and shares technology trends and in... Read More →

cdCon 2022 How we build CI CD Observability with OpenTelemetry pdf

Tuesday June 7, 2022 9:40am - 10:10am CDT
Virtual Track

Virtual Sessions, Observability & Analytics

Technology Focus Other
Presentation Slides Attached Yes

10:50am CDT

[LIVE VIRTUAL SESSION] CD Foundation Best Practices SIG - Tara Hernandez, Google & Terry Cox, Bootstrap

The CD Foundation Best Practices SIG will host a round table discussion and workshop opportunity for community members to discuss the current descriptions, compare their organization's CI/CD pipeline against the documented best practices, and potentially contribute an overview of their solution as an example use-case to be published as a community doc contribution.

Speakers

Tara Hernandez

Vice President Developer Productivity, MongoDB

Tara Hernandez has spent nearly thirty years evolving ways for companies to develop and ship software. She helped launch Mozilla.org and has been a firm proponent of open source ever since. She also thinks smart companies understand the business value of having a diverse employee... Read More →

Terry Cox

Director, Bootstrap Ltd

Terry has a 30 year background in entrepreneurship, technology and the design of software and hardware products with a focus on tackling big problems at scale. He currently leads the CDF MLOps Roadmap and is MLOps Lead for Jenkins-X. He is a practiced public speaker.

Tuesday June 7, 2022 10:50am - 11:20am CDT
Virtual Track

Virtual Sessions

Technology Focus Other

10:50am CDT

[VIRTUAL SESSION] DevSecOps with Shipwright and Tekton - Adam Kaplan & Vincent Demeester, Red Hat

Speed and security are often seen as competing priorities in the application development process. Emerging features in Shipwright and Tekton help bridge this gap, allowing developers to quickly build applications and verify the security of their software supply chains. In this session, we will demonstrate how Tekton and Shipwright can be used throughout the entire application development lifecycle to code, test, verify, and deploy applications. At each step in a piece of code’s journey to production, we will highlight features that help organizations meet SLSA compliance requirements. These include container image signing with cosign, generation of software bills of materials (SBOMs), and provenance attestations with Tekton Chains. Following this session, attendees will be able to use Shipwright and Tekton to secure the software supply chain of their own applications.

Speakers

Adam Kaplan

Principal Software Engineer, Red Hat

Adam Kaplan (he/him/his) is a software engineer at Red Hat and a Shipwright maintainer. He currently leads efforts at Red Hat to simplify hybrid cloud application development, and previously maintained developer-focused components for OpenShift. Before joining Red Hat, Adam helped... Read More →

Vincent Demeester

Senior Principal Software Engineer, Red Hat

Vincent Demeester is a french developer, Gopher, sysadmin, factotum, free-software fan and unicode lover. He is working RedHat as a principal software engineer, previously at Docker, in the core team. He is a maintainer of the docker project (moby/moby, docker/cli, …), one the lead... Read More →

DevSecOps with Shipwright and Tekton pdf

Tuesday June 7, 2022 10:50am - 11:20am CDT
Virtual Track

Virtual Sessions

Technology Focus Other
Presentation Slides Attached Yes

10:50am CDT

[VIRTUAL SESSION] How to Grow and Mentor an Open Source Community & Achieve Collaboration with Over 170 Listed Corporations - Trista Pan, SphereEx

Having gone from being a woman developer in the open source world to CTO, didn't simply mean a change in her title. This journey included growing an open source community from just a handful of contributors, to one of the leading communities in China and fastest growing Apache projects in the world. The secret? True openness and inclusiveness, the willingness to both mentor students by collaborating with initiatives such as Google Summer of Code, while fostering a technically sound community whose solution has been adopted by over 170 publicly listed corporations. Juan Pan will share her empowering journey and valuable experience of being the CTO at an open source commercial start-up, how women in tech can turn the challenges they face into opportunities, and best practices for open source project leadership. Tune in to get inspired to think big, leave your mark and pursue your dream.

Speakers

Trista Pan

CTO & Co-Founder, SphereEx

Juan Pan (Trista), an AWS Data Hero, is the CTO and Co-Founder of SphereEx, an Open-Source SaaS commercial start-up backed by some of the world's top VCs. Previously a Senior DBA at JD Technology, she was responsible for the design and development of JD Digital Science and Technology’s... Read More →

Cdcon Trista Pan pdf

Tuesday June 7, 2022 10:50am - 11:20am CDT
Virtual Track

Virtual Sessions

Technology Focus Other
Presentation Slides Attached Yes

11:30am CDT

[VIRTUAL SESSION] Lightning Talk: Automated Testing Done Right - Aditya Bansal, Cortex

As software engineering tools and languages continue to evolve, it has become easier than ever to write software that touches billions of users. With the advent of cloud providers like AWS, GCP, Azure, and several more, the continuous delivery of software is a very reachable milestone, for companies of all sizes. But what about quality? How do we ensure that every commit we send to production is not going to fail? In this talk, Aditya will review lessons that he has learned from working on testing & CI/CD infrastructures at three different startups as an early engineer. He will also cover how not to make the same mistakes he did.

Speakers

Aditya Bansal

Founding Engineer, Cortex

Aditya is a Founding Engineer at Cortex, the first system of record for engineering which enables engineering teams to drive adoption of developer best practices, funded by Sequoia Capital and Combinator. He started off his career in software engineering at Poynt, where he helped... Read More →

Automated Testing Done Right cdCon pdf

Tuesday June 7, 2022 11:30am - 11:40am CDT
Virtual Track

Virtual Sessions

Technology Focus Jenkins
Presentation Slides Attached Yes

11:30am CDT

[VIRTUAL SESSION] Journey to Automated Releases - Kranthi Challa & Deepa Padmanabhan, Netflix

How do we go from dreading a release to embracing the sense of accomplishment that a release is meant to bring? The solution needs to provide high confidence to bring about a culture shift, where humans are no longer gatekeepers of the release process. Our methodology meets this high bar with ideas like - application partitioning for independent rollouts - build-confidence scores for sign-off - promotion checks that backtrack a releasable build and many more. In this talk, you will learn the Netflix UI team’s journey in building a “Release ROBOT” for continuously delivering a large monolithic codebase while seamlessly entertaining the world.

Speakers

Kranthi Challa

Sr Site Reliability Engineer, Netflix

Kranthi is a Senior Site Reliability Engineer in the Website tooling and delivery team at Netflix. With more than 10 years of experience working for Netflix and previously Microsoft, she has a passion for customer experience and continuous delivery. At Netflix she focuses on building... Read More →

Deepa Padmanabhan

Sr Software Engineer, Netflix

Deepa is a Senior Software Engineer focussing on Tools and Infrastructure on the UI Platform team at Netflix. She is passionate about enabling smooth developer experiences and efficient deployments and automating workflows across the different client platforms. She has over 10 years... Read More →

Journey to automated releases pdf

Tuesday June 7, 2022 11:30am - 12:00pm CDT
Virtual Track

Virtual Sessions

Technology Focus Jenkins, Spinnaker, Other
Presentation Slides Attached Yes

11:30am CDT

[VIRTUAL SESSION] The State of Art in Tackling Flaky Tests - Kohsuke Kawaguchi, Launchable, Inc.

Flakiness is a part of the reality for software engineers everywhere, it refuses to go away. This is happening in your team whether or not you know it, it caused frustrations, failed pull requests, added more stress to a hotfix delivery. Come listen to Kohsuke Kawaguchi, the creator of Jenkins to learn how software teams around the world has tackled this problem, from “idol” companies like Google & GitHub, to the “next door neighbor” company just like yours, so that you can tackle this in your team, and see how this is a part of a bigger emerging movement.

Speakers

Kohsuke Kawaguchi

Co-CEO, Launchable, Inc.

Kohsuke Kawaguchi is the creator of Jenkins and co-CEO of Launchable. He is a well-respected developer and popular speaker at industry and Jenkins community events. Kawaguchi’s sensibilities in creating Jenkins and his deep understanding of how to translate its capabilities into... Read More →

Tuesday June 7, 2022 11:30am - 12:00pm CDT
Virtual Track

Virtual Sessions

Technology Focus Other

11:40am CDT

[VIRTUAL SESSION] Failure Is Not an Option It's a Fact - Ixchel Ruiz, JFrog

Failure is an inevitable part of success. Failure in the context of innovation efforts has helped thousands of start-up companies to succeed but in the context of a known execution process, it can harm results or reputations or create undue risk. In software development we are situated at the cross road between innovation and known processes so how do we benefit from failure and achieve success?

Speakers

Ixchel Ruiz

Senior Software Developer / DA, JFrog

Ix-chel Ruiz has developed software application & tools since 2000. Her research interests include Java, dynamic languages, client-side technologies and testing. Java Champion, CDF Ambassador, hackergarten enthusiast, Open Source advocate, public speaker and mentor.

Tuesday June 7, 2022 11:40am - 11:50am CDT
Virtual Track

Virtual Sessions

Technology Focus CD Events

2:15pm CDT

[VIRTUAL SESSION] Modern Organizational Architecture, Are Microservices a Model for Diversity? - Brian Dawson, Ortelius, Ripple

DevOps and Continuous Delivery require thoughtful attention to the Trinity of People/Culture, Process/Practices, and Tools/Tech. Very often teams and organization lean into the hard science of Process/Practices or Tools/Tech while struggling with or even completely avoiding People/Culture. Yet as proven by many high performing teams, a healthy and effective approach People and Culture is key to your success. In this session we will use the concept of micro-services as an analogy for how we can frame and manage diversity as "micro-cultures" which can balance between flexibility, freedom and alignment on shared objectives. Similar to the promise of micro services as enabling resilient fault tolerant systems, we can achieve resilient fault tolerant software organizations.

Speakers

Brian Dawson

DevOps Evangelist, Ortelius Board of Governers, Ripple - Head of Partner Relations, Ortelius, Ripple

I have over 28+ years in software development in the areas of: ● Product Management/Marketing ● Developer Relations and Evangelism ● Technical Sales and Solutions Architecture ● Quality, Engineering, and Development ● Consulting and Engineering Services ● Partner and Business... Read More →

Wednesday June 8, 2022 2:15pm - 2:45pm CDT
Virtual Track

Virtual Sessions, Community & Culture

Technology Focus Ortelius

2:15pm CDT

[VIRTUAL SESSION] The Battle of Policies: OPA’s Rego vs. JSON Schema - Shimon Tolts, Datree

On the one hand, it’s well known that OPA's Rego is very popular and easy to get started with, but hard to master. On the other hand, JSON Schema is considered one of the fundamental libraries for validating manifests… but which one is THE ONE for you? In this talk, we'll battle it out head to head with the two ultimate libraries OPA's Rego and JSON Schema. We'll test both of the solutions by validating Kubernetes manifests against real-life use cases and review their pros and cons. We’ll explore how we can integrate each one of them into the CI/CD pipeline, and learn how they work under the hood. Finally, we’ll make the case for which one to use in which scenario. May the best config language win!

Speakers

Shimon Tolts

CEO & Co-Founder, Datree

Shimon established and managed the Software Engineering Infrastructure department for 400 engineers at ironSource. Also as an AWS Community Hero, Shimon runs the largest AWS user-group worldwide and an avid speaker at conferences. Today, Shimon is the CEO & Co-Founder at Datree, an... Read More →

Wednesday June 8, 2022 2:15pm - 2:45pm CDT
Virtual Track

Virtual Sessions

Technology Focus Other

2:55pm CDT

[VIRTUAL SESSION] Lightning Talk: Safe to Fail Continuous Delivery Culture - Sylvia Lobo, Digital14

Building a new software product and deploying it in Cloud is a highly innovative and creative process. Things simply don't go to plan all the time, setbacks and failures are inevitable along the way. What makes a difference is how a team deals with them. Each failure is an opportunity to reassess, make a change and try a different approach. In order to succeed, testing teams must become resilient to failure. They must focus on the learning outcomes that they present.

Speakers

Sylvia Lobo

Project Manager, Digital14

1. I am Sylvia Lobo, Project Manager with Digital14.I have experience in MS Azure Cloud project management, especially in cloud deployment with Azure Pipeline with Digital14 2. I’m passionate about inclusivity (because it’s a human right) and intersectional growth (there’s stats... Read More →

SafeToFail DevCon2022 v01 pdf

Wednesday June 8, 2022 2:55pm - 3:05pm CDT
Virtual Track

Virtual Sessions, Community & Culture

Technology Focus CD Events
Presentation Slides Attached Yes

2:55pm CDT

[VIRTUAL SESSION] DX Design: Diversity Experience as an Accelerator - Ann Marie Fred, Red Hat; Marky Jackson, Equinix; Hope Lynch, CloudBees; Zainab Daodu, She Code Africa & Moderated by Brian Dawson, Ortelius,

As a moderator of this diverse and accomplished panel, Brian Dawson will lead a discussion on real world experience and practices in achieving community growth and team performance though based on diversity and inclusion and in the presence of common challenges and impediments. Attendees will gain honest insights on D&I, and practical examples which they can apply within their communities and organizations.

Speakers

Zainab Daodu

Open Source Programs Manager, She Code Africa

Zainab is a Technical Writer at Tealium and the Open Source Programs Manager for She Code Africa a non-profit organization focused on celebrating and technically empowering young girls and women in technology across Africa. Her role at She Code Africa involves promoting a more diverse... Read More →

Marky Jackson

Software Engineer, Methodair

Software developer. Lover of family and friends. Die-hard San Francisco Giants fan.

Hope Lynch

Sr. Director, Technology Strategy, CloudBees

My favorite area of focus is Transformation, whether it is Agile, Business, or Digital. Each of these overlap on the Venn diagram of Transformation and each touches all aspects of businesses today. At CloudBees I work as Senior Director of Platform focusing on driving product marketing... Read More →

Ann Marie Fred

Senior Principal Software Engineer, Red Hat

I’ve been a software engineer for more than 20 years, I was a manager for 3 years, and I have been a Security Focal for 4 years. I’ve worked in research, consulting, web portal development, IT systems management development, cloud computing, hybrid cloud, deployment automation... Read More →

Brian Dawson

DevOps Evangelist, Ortelius Board of Governers, Ripple - Head of Partner Relations, Ortelius, Ripple

Wednesday June 8, 2022 2:55pm - 3:25pm CDT
Virtual Track

Virtual Sessions, Community & Culture

Technology Focus Ortelius

2:55pm CDT

[VIRTUAL SESSION] How Shifting Left is Helping CapitalOne in its CICD Process - Gokul Prabagaren & Nagesh Kumar Vinnakota, CapitalOne

CapitalOne is first U.S Bank to exit out of legacy on-premise datacentres and go all in cloud. On this journey we have completely re-innovated our software delivery and automated all our software delivery process. There are various key milestones to our CICD journey. This talk will focus on how adopting shifting left is helping us in our Software Delivery Lifecycle and Security

Speakers

Nagesh Kumar Vinnakota

Engineering Manager, CapitalOne

Engineering Manager at CapitalOne.

Gokul Prabagaren

Engineering Manager, CapitalOne

Engineering Manager at CapitalOne. First Programming Language Personally : Basic First Programming Language Professionally : Java 1.4 on Sun Solaris Latest Stint : Running Apache Spark in Centos VMs and helping team deliver business value Speaker at IndyCloudConf2020, Spark AI Summit... Read More →

Wednesday June 8, 2022 2:55pm - 3:25pm CDT
Virtual Track

Virtual Sessions

Technology Focus Jenkins

3:55pm CDT

[VIRTUAL SESSION] Continuous Delivery and InnerSource - Why you Should be Doing Both - Tom Sadler & Steph Egan, BBC

Continuous Delivery and InnerSource are two software engineering practices that aim to increase quality and break down organisational barriers. It may come as no surprise, then, that these practices can really compliment each other. Continuous Delivery makes InnerSource contributions seamless, and gives contributors confidence in the stability of the project. Continuous Delivery tooling is often a good candidate for InnerSource because it solves common problems, and allows consumers to contribute features they require for their specific use cases. This case study of BBC iPlayer & Sounds looks at how InnerSource projects are Continuously Delivered, how Continuous Delivery tooling is opened up to collaboration via InnerSource, and what impact this has.

Speakers

Steph Egan

Principal Software Engineer, BBC

Steph is a Principal Software Engineer at the BBC who works with a large variety of teams across the iPlayer and Sounds products to help them with their Delivery Practices. Steph also provides Product support for a development team who are focused on helping other teams “Be better... Read More →

Tom Sadler

Principal Software Engineer, BBC

Tom Sadler is a Software Engineering Team Lead for BBC iPlayer & Sounds, working in the connected TV space, and a member of the InnerSource Commons. He is a leader in InnerSource and Continuous Delivery practices within iPlayer and Sounds and across the wider BBC, and a Trusted Committer... Read More →

cd innersource pdf

Wednesday June 8, 2022 3:55pm - 4:25pm CDT
Virtual Track

Virtual Sessions

Technology Focus Other
Presentation Slides Attached Yes

3:55pm CDT

[VIRTUAL SESSION] Security as Code: A DevSecOps Approach - Joseph Katsioloudes, GitHub

Security as Code (SaC) is the methodology of codifying security tests, scans and policies. Security is implemented directly into the CI/CD pipeline to automatically and continuously detect security issues. Adopting SaC tightly couples application development with security and vulnerability management, while enabling developers to focus on functionality. More importantly, it improves the collaboration between Development and Security teams and helps nurture a culture of security across the organization. In this session, we will review lessons learned from DevOps to implement a successful DevSecOps culture, i.e how we can make developers contribute security checks with the SaC approach. We will introduce CodeQL, a language that allows security checks with code, and will demo how we can code queries for vulnerabilities so they can be identified as soon as they hit your CI/CD pipeline.

Speakers

Joseph Katsioloudes

Developer Advocate, GitHub

Joseph is a security expert who empowers developers to ship secure software through his research and education work at the GitHub Security Lab. His recent contributions include video content with combined 1M+ views packed with practical security tips, and the free game gh.io/securecodegame... Read More →

cdCon Joseph Katsioloudes pdf

Wednesday June 8, 2022 3:55pm - 4:25pm CDT
Virtual Track

Virtual Sessions

Technology Focus CD Events

3:55pm CDT

[VIRTUAL SESSION] The State of Continuous Delivery: The Evolution of Software Delivery Performance - Kara de la Marck, CDF

Speakers

Kara de la Marck

Senior Ecosystem Advocate, CDF

Kara is a Senior Ecosystem Advocate at the Continuous Delivery Foundation (CDF) and co-chair of the CDF’s Interoperability SIG. Having worked as a developer, Kara enjoys helping developer teams and companies get better at delivering software. She is passionate about open source... Read More →

Wednesday June 8, 2022 3:55pm - 4:25pm CDT
Virtual Track

Virtual Sessions

Technology Focus CD Events

4:35pm CDT

[VIRTUAL SESSION] Continuous Integration and Continuous Delivery Pipelines for Beginners and Managers - Ann Marie Fred, Red Hat

If you keep hearing about Continuous Integration or Continuous Delivery, but you don’t know what these CI/CD Pipelines really do, this is the talk for you. We’ll run through a series of tasks or steps that are commonly handled by CI/CD pipelines. For each, we’ll see what the task does, why it’s important, what inputs and outputs are involved, and what side effects to expect. If you already use CI/CD, this talk could inspire you to do more, especially in the realm of DevSecOps and compliance automation. Build your CI/CD foundational knowledge based on shared vocabulary from the CD Foundation Interoperability SIG!

Speakers

Ann Marie Fred

Senior Principal Software Engineer, Red Hat

Continuous Integration and Continuous Delivery Pipelines for Beginners and Managers Ann Marie Fred cdCon 2022 pdf

Wednesday June 8, 2022 4:35pm - 5:05pm CDT
Virtual Track

Virtual Sessions

Technology Focus Tekton, Other
Presentation Slides Attached Yes

4:35pm CDT

[VIRTUAL SESSION] Jenkins 2022 and Beyond? - Oleg Nenashev, Dynatrace

Is the Butler Still Young? Maybe not but it is still one of the most popular automation tools. Jenkins in 2022 is not Jenkins in 2012. It keeps evolving to address demands from its users and contributors: pipeline as code, configuration as code, better support for cloud environments, UX, etc. We are looking forward to the next major iteration in Jenkins evolution. So what’s next for it? I will focus on the current challenges for Jenkins. What does need to change in the project and the community to keep it relevant? We will talk about revitalizing the community and attracting new company contributors, consolidating user experiences, and reusing experiences of BlueOcean and Jenkins X? We will also talk about interoperability with other projects, making Tekton a first class citizen Pipeline engine, and making Jenkins available everywhere regardless of CI/CD system you actually use.

Speakers

Oleg Nenashev

Community Builder, Gradle

Oleg is a developer tools hacker, community builder and DevRel consultant. He's passionate open source software, open ecosystems and open hardware advocate. Oleg is a core maintainer Jenkins project where he writes code, mentors contributors and organizes community events. He is a... Read More →

2022 cdCon Jenkins 2022 and Beyond pdf

Wednesday June 8, 2022 4:35pm - 5:05pm CDT
Virtual Track

Virtual Sessions, Cloud Native Continuous Delivery

Technology Focus Jenkins
Presentation Slides Attached Yes