Dan “Pop” Papandrea (@danpopnyc, Field CTO @Sysdig Host @PopcastPop) talks about securing DevOps, how to secure containers and runtimes, and the cultural challenges of security in an agile world.
SHOW: 460
SHOW SPONSOR LINKS:
- Datadog Security Monitoring Homepage - Modern Monitoring and Analytics
- Try Datadog yourself by starting a free, 14-day trial today. Listeners of this podcast will also receive a free Datadog T-shirt
- strongDM Homepage
- Start your free 14 day trial today at: strongdm.com/cloudcast
CLOUD NEWS OF THE WEEK - http://bit.ly/cloudcast-cnotw
PodCTL Podcast is Back (Enterprise Kubernetes) - http://podctl.com
SHOW NOTES:
- Sysdig Homepage
- ThePOPcast with Dan POP Homepage
- Escape 2019 talk
- Webinar on the top 5 Pipeline considerations we did with Booz Allen
Topic 1 - Welcome to the show. I first got to know you through your podcast The POPcast, but you’re been around this evolution of the cloud for quite a while. Tell us a bit about your background.
Topic 2 - There’s a concept that’s now been around a couple years called “DevSecOps”. Originally it was “Sec” being jammed in there because it had been excluded from the early days of DevOps (at least in practice). Where are we with DevSecOps today?
Topic 3 - Let’s talk about DevSecOps in the context of containers. We now have things like Container Scanning, Container Signing, and Immutable Infrastructure and yet security still concerns people. Isn’t the “software supply chain” supposed to weed out the vulnerabilities before they get into the production systems?
Topic 4 - One of the challenges that companies have in adopting containers is that they were used to having root access to hosts, and containers live in the user space. How can security tools fit into a container world?
Topic 5 - As you talk to lots of companies, how are they dealing with the cultural challenges that go along with implementing DevSecOps?
Topic 6 - Any tips or suggestions you can share to help people avoid common DevSecOps mistakes, or accelerate best practices and wider adoption?
FEEDBACK?
- Email: show at thecloudcast dot net
- Twitter: @thecloudcastnet
FEEDBACK?
- Email: show @ reasoning dot show
- Bluesky: @reasoningshow.bsky.social
- Twitter/X: @ReasoningShow
- Instagram: @reasoningshow
- TikTok: @reasoningshow
Popular Podcasts
Las Culturistas with Matt Rogers and Bowen Yang
Ding dong! Join your culture consultants, Matt Rogers and Bowen Yang, on an unforgettable journey into the beating heart of CULTURE. Alongside sizzling special guests, they GET INTO the hottest pop-culture moments of the day and the formative cultural experiences that turned them into Culturistas. Produced by the Big Money Players Network and iHeartRadio.
Dateline NBC
Current and classic episodes, featuring compelling true-crime mysteries, powerful documentaries and in-depth investigations. Follow now to get the latest episodes of Dateline NBC completely free, or subscribe to Dateline Premium for ad-free listening and exclusive bonus content: DatelinePremium.com
The Questlove Show
The Questlove Show builds on the award-winning Questlove Supreme podcast, bringing listeners into intimate, one-on-one conversations with peers, influences, and friends. Hosted by Ahmir “Questlove” Thompson, each episode uncovers the unexpected — from morning rituals and hidden talents to the art and experiences that shaped a guest’s journey. Sometimes playful, sometimes profound, always curious, QLS offers rare insight into leaders in music, film, television, comedy, literature, mental health, and beyond. It’s a fresh, unpredictable spin from a trusted source — a place where randomness is encouraged, tangents are welcomed, and conversations are anything but ordinary.