#shiftleft — Public Fediverse posts

Красное не мёржим: как мы внедрили e2e тесты в разработку

Можно ли сделать e2e тесты мощным инструментом раннего отлова багов, не потопив при этом CI и не всем не разругавшись? Рассказываю, через что пришлось пройти, чтобы релизы были спокойные, пайплайны — зеленые, разработчики — довольные. Как мы это внедряли, сколько сопротивления получили и что из этого выжило спустя четыре месяца.

https://habr.com/ru/articles/1070260/

#shiftleft #тестирование #quality_gates #react_native #e2e #e2e_тестирование #e2eтесты #qa_automation #qa

Your test suite is green. Your test data is fiction. Guess which one production believes.

A suite built on stale or invented data reports green while real edge cases wait in production. Test data is a feedback loop, and a broken one lies to you.

In the AI era it's also a compliance firewall: never hand a production dump to an external model. Mask it, synthesize it, then let AI in.

A practice from my book: https://leanpub.com/CyberneticEnterprise

#TestDataManagement #ShiftLeft #DevOps

Мобильное тестирование в 2026: от истоков к трендам

Какова ситуация в мобильном тестировании в 2026-м году? На связи Ильнур – ведущий тестировщик: начал свой путь в ИТ 10 лет назад как специалист технической поддержки. Со временем понял, что хочу не просто «чинить», а понимать, как всё устроено. Так я пришёл в тестирование и уже через год стал тимлидом команды. На протяжении следующих 5 лет участвовал в запуске более 10 приложений – от MVP до многомиллионных. Я учился на ошибках, пропускал через себя сотни релизов, «съел собаку» в ручном тестировании, понял, как работают платформы, сети, железо. Хочу поделиться своими мыслями о мобильном тестировании как человек, который знает сферу изнутри. Читать полностью

https://habr.com/ru/companies/sovcombank_technologies/articles/1053818/

#qa #qa_mobile #qa_automation #ai #shiftleft #lowcode #тестирование #искусственный_интеллект #мобильная_разработка #мобильное_тестирование

RE: https://mastodon.online/@myfear/116826263082588553

"I still think the basic rule is simple: use AI to go faster on work you understand already. If you hand core business logic to a model and hope for the best, you are outsourcing the part you still need to own." #shiftLeft #AI

Note that if you click the play link inline on Mastodon you'll only get the audio which isn't so useful. Click on the link to view the (5 minute) video. Noting that despite the title the message of this is not specific to Quarkus.

RE: https://mastodon.online/@myfear/116826263082588553

"I still think the basic rule is simple: use AI to go faster on work you understand already. If you hand core business logic to a model and hope for the best, you are outsourcing the part you still need to own." #shiftLeft #AI

Note that if you click the play link inline on Mastodon you'll only get the audio which isn't so useful. Click on the link to view the (5 minute) video. Noting that despite the title the message of this is not specific to Quarkus.

Тестирование требований с ИИ: что делать, когда контекст уже готов

Привет, Хабр! Меня зовут Алена Метенева, я руководитель направления по тестированию в Росгосстрахе. А это третья статья цикла про внедрение ИИ в тестирование. В первой статье я рассказывала, зачем мы вообще пошли в пилот и почему начали с ручного режима в Cursor. Во второй разбирала подготовку контекста: от простого кейса до больших ТЗ с PDF, диаграммами и макетами. Теперь двигаемся дальше: контекст уже собран и актуализирован, значит пора переходить к следующему этапу — тестированию требований с помощью ИИ .

https://habr.com/ru/companies/rgs_it/articles/1044980/

#тестирование #требования #ии #shiftleft

Everyone is navigating AI security in real time -- even Google | TechCrunch https://techcrunch.com/2026/05/24/everyone-is-navigating-ai-security-in-real-time-even-google/ #cybersecruity #AI #AISecurity #GoogleCloud #ShadowAI #ShiftLeft #Governance

Everyone is navigating AI security in real time -- even Google | TechCrunch https://techcrunch.com/2026/05/24/everyone-is-navigating-ai-security-in-real-time-even-google/ #cybersecruity #AI #AISecurity #GoogleCloud #ShadowAI #ShiftLeft #Governance

#Quality doesn’t wait until the end anymore.

With #ShiftLeft + #Continuous testing, teams catch issues early, automate smarter, and ship with confidence.

Read More: https://www.testrigtechnologies.com/key-difference-between-functional-testing-and-non-functional-testing/

#softwaretesting #QAtesting #automationtesting #Testautomation

Unravel the meaning behind "treating data as an asset" in a data-driven world. Learn how embedding data quality, governance, and compliance practices early in the software development lifecycle can transform data management. Join us as we delve into the "Shift Left" approach and its significance on data quality. #DataAsset #DataQuality #ShiftLeft 👉 https://peterbaumann....
https://community.datentreiber.com/2026/03/31/shifting-left-evolution-of-data-quality-and-consumer-satisfaction/?fsp_sid=605

The only thing "right" about testing late is how wrong it always goes.

In "The Cybernetic Enterprise" I explain why Shift Left is essential: move testing, security, and validation to the beginning, not the end.

With AI generating code faster than ever, automated tests and security checks are the only way to keep quality intact.

Shift Left is not a testing strategy. It is a survival strategy.

https://www.cyberneticenterprise.com/

#ShiftLeft #DevSecOps #CyberneticEnterprise #TestAutomation

Die vier Prinzipien für mehr Produktgeschwindigkeit
Die vier Prinzipien der Produktentwicklung sind die Grundlage für Product Velocity und nicht nur für Systems Engineers relevant.
https://www.se-trends.de/4-product-velocity-prinzipien/
#Industrie #ProductVelocity #Accelerate #Architektur #DigitaleZwillinge #Produktentwicklung #ShiftLeft #Systemarchitektur #ValueThinking

DevSecOps Mindset

Security isn't a gate you pass through; it's the road you build. As a DevSecOps Engineer, my goal is to bake security into the pipeline so deeply that it becomes invisible. Stop fixing vulnerabilities—start preventing them by design.

🛡️💻 #DevSecOps #InfoSec #ShiftLeft

DevSecOps Mindset

Security isn't a gate you pass through; it's the road you build. As a DevSecOps Engineer, my goal is to bake security into the pipeline so deeply that it becomes invisible. Stop fixing vulnerabilities—start preventing them by design.

🛡️💻 #DevSecOps #InfoSec #ShiftLeft

Shifting Left delivers clean, reliable, and accessible data to everyone who needs it - right when they need it.

The result? Less complexity, lower overhead, and far less break-fix work, freeing teams to focus on higher-value problems.

At the core of a #ShiftLeft strategy are Data Products. They form the backbone of healthy data communication and ensure quality is built in - not patched on later.

📖 Great insights from this #InfoQ article on rethinking the Medallion Architecture: https://bit.ly/3WHjxsf

#SoftwareArchitecture #DataMesh #DataEngineering #DataLake #DataPipelines

Shifting Left delivers clean, reliable, and accessible data to everyone who needs it - right when they need it.

The result? Less complexity, lower overhead, and far less break-fix work, freeing teams to focus on higher-value problems.

At the core of a #ShiftLeft strategy are Data Products. They form the backbone of healthy data communication and ensure quality is built in - not patched on later.

📖 Great insights from this #InfoQ article on rethinking the Medallion Architecture: https://bit.ly/3WHjxsf

#SoftwareArchitecture #DataMesh #DataEngineering #DataLake #DataPipelines

Great read for tech leaders exploring shift-left security and new IT operating models. Join the discussion and share your view on early security adoption. #DigitalTransformationLeadership #CIOpriorities #EmergingTechnologyStrategy #ITOperatingModelEvolution #DataDrivenDecisionMakingInIT #ShiftLeft #SecureByDesign #LeadershipInTech
https://www.linkedin.com/pulse/shifting-left-embedding-security-development-sanjay-k-mohindroo--penac

Security (b)log: Urgency & priority
Good planning beats last-minute panic. Have you ordered your Christmas gifts yet?
#shiftleft

News from the big bad world: password managers research | ransomware for phones | tax' move to M365 still controversial | more
https://securityblogpatrick-english.blogspot.com/

Security (b)log: Urgentie en prioriteit
Goed plannen is beter dan achteraf haast hebben. Heb jij al alle kerstcadeaus besteld?
#shiftleft

GBBW: onderzoek password managers | ransomware op telefoon | overstap Belastingdienst naar M365 nog steeds controversieel | meer
https://securityblogpatrick.blogspot.com/

✈️ Welcoming Amadeus as officially listed on Microcks' public adopter list!

Amadeus leverages Microcks to strengthen its shift-left strategy for mocking and contract testing. Among their use cases are using Microcks to mock OIDC, helping enforce and automate zero-trust policies while supporting their migration to the public cloud. It is an inspiring example of how API simulation can drive both security and agility.

#OpenSource #ShiftLeft #ZeroTrust #CloudNative #Community

✈️ Welcoming Amadeus as officially listed on Microcks' public adopter list!

Amadeus leverages Microcks to strengthen its shift-left strategy for mocking and contract testing. Among their use cases are using Microcks to mock OIDC, helping enforce and automate zero-trust policies while supporting their migration to the public cloud. It is an inspiring example of how API simulation can drive both security and agility.

#OpenSource #ShiftLeft #ZeroTrust #CloudNative #Community

Co v IT oboru znamená #ShiftLeft ?

Vysvětlím.
HR oddělení šetří peníze a tak se jim nehlásí žádní kvalitní testeři či #security experti. Jenže ten požadavek na zabezpečení se nějak vyřešit musí. No a tak vznikl #buzzword Shit left. Prostě to udělá vývojář a ostatní jen budou hledat co ještě by vývojář mohl dělat.

Jednou se zase vrátí termín #FullStack developer, bude drahej a přetíženej a tak znova přijde Shift Left.

Manažeři přeci musí vykazovat nějakou čínnost...

#ZmrdiVohnoutiAMy

Co v IT oboru znamená #ShiftLeft ?

Vysvětlím.
HR oddělení šetří peníze a tak se jim nehlásí žádní kvalitní testeři či #security experti. Jenže ten požadavek na zabezpečení se nějak vyřešit musí. No a tak vznikl #buzzword Shit left. Prostě to udělá vývojář a ostatní jen budou hledat co ještě by vývojář mohl dělat.

Jednou se zase vrátí termín #FullStack developer, bude drahej a přetíženej a tak znova přijde Shift Left.

Manažeři přeci musí vykazovat nějakou čínnost...

#ZmrdiVohnoutiAMy

Пострелизная валидация данных как новый вид тестирования?

Что делать если шаткие предположения о логике работы легаси проектов используют как фундамент для новой логики? Как обезопасить легаси проект от рисков, которые не может покрыть стандартное тестирование? Как все это сделать быстро и дешево? И при чем тут, возможно, новый вид тестирования?

https://habr.com/ru/articles/963860/

#тестирование_по #теория_тестирования #тестирование_данных #data_validation #shiftleft

От Jest к Vitest на backend тестах: как мы мигрировали тестовый фреймворк для ускорения CI и повышения стабильности

Привет! Я Максим Кузьмин, старший инженер по автоматизации в команде Т-Путешествий. Строю и развиваю процессы автоматизации и разрабатываю инструменты тестирования. Для внутренних нужд мы разработали фреймворк для изолированного тестирования бэкенда. Он написан на TypeScript, обеспечивает гибкость, масштабируемость и интеграцию с разными внутренними системами. Выступает как единое решение для написания, запуска и поддержки тестов в стабильной и предсказуемой среде. В статье будет история миграции с Jest на Vitest. Расскажу, какие проблемы подтолкнули нас к переходу, как мы адаптировали окружение и какие результаты получили. Поделюсь опытом улучшения скорости запуска тестов и стабильности результатов. Надеюсь, что наш опыт поможет кому-то превратить автотесты из источника проблем в устойчивый инструмент контроля качества.

https://habr.com/ru/companies/tbank/articles/960872/

#тестирование #backend #qa_automation #автоматизация_тестирования #javascript #typescript #shiftleft #улучшение_процессов #quality_assurance #process_improvement

Внедрение автоматизированного AppSec конвейера за пару дней без смс и регистрации

Работоспособность любого приложения может быть подвержена угрозам: от сбоев в работе до кражи персональных данных. С этими рисками следует работать через регулярные и комплексные проверки кода на уязвимости, которые должны быть полностью автоматизированными. Несмотря на то, что тема актуальная, в интернете до сих пор сложно найти практические примеры, которые бы позволили построить независимый конвейер, не привязанный к системе контроля версий. Меня зовут Алексей Исламов, я администратор СИБ в Точка Банк. В статье предлагаю готовый вариант реализации такой системы из open‑source инструментов, которым может воспользоваться каждый.

https://habr.com/ru/companies/tochka/articles/959454/

#appsec #devsecops #shiftleft #opensourse

Portable tests run anywhere, not just in QA. @spoole167 makes the case for shared test ownership—without slowing devs down. His model weighs runtime, flakiness & bug yield. Want faster feedback loops?

Read: https://javapro.io/2025/08/20/a-10x-approach-to-quality-assurance/

@EclipseFdn #ShiftLeft #SoftwareTesting #Java

Portable tests run anywhere, not just in QA. @spoole167 makes the case for shared test ownership—without slowing devs down. His model weighs runtime, flakiness & bug yield. Want faster feedback loops?

Read: https://javapro.io/2025/08/20/a-10x-approach-to-quality-assurance/

@EclipseFdn #ShiftLeft #SoftwareTesting #Java

Как ускорить свою доставку и прокачать этим бизнес и команду

🚀 Как перестать бояться релизов и начать жить: практический гайд для тимлидов Сбор практик для тех, кто хочет сделать доставку кода не болью, а удовольствием Знакомая ситуация? Ваши релизы похожи на прыжок с парашютом без парашюта? Команда нервничает при каждом деплое, а бизнес теряет деньги из-за медленной доставки фич? Эта статья для вас. Актуальность статьи: в современном мире скорость доставки фич — это не просто модный тренд, а вопрос выживания на рынке. Компании с быстрой доставкой обгоняют конкурентов по доходам на 20–40%. Цель исследования — показать, как технические и управленческие практики влияют на ключевые бизнес-метрики и уровень счастья команды. Мы делимся реальным опытом из агротех-разработки. Методология основана на практическом применении DevOps-практик и измерении результатов через метрики DORA. Мы покажем, как: Trunk-Based Development сокращает время доставки на 30% Feature Toggles делают релизы безопасными Left-shifting тестирование снижает время восстановления с 15–20 часов до 1 часа Kanban превращает хаос в прозрачную систему Основные результаты демонстрируют, что быстрые релизы = быстрые проверки гипотез, маленькие партии изменений = дешёвые ошибки, частые деплои = счастливая команда. P.S. Если вы всё ещё релизите раз в квартал — эта статья поможет вам пересмотреть свои подходы к разработке. 🎯

https://habr.com/ru/articles/949288/

#devops #enps #dora #tbd #shiftleft #kanban #vsm #приоритизация

🎥 Missed one of my past conference talks? Let’s fix that.

I’m sharing my favorites—packed with real-world advice, lessons, and a few laughs.

“Pushing Left, Like a Boss”
📽️ https://twp.ai/4iporz

#CyberSecurity #SecurityAwareness #appsec #shiftleft

🎥 Missed one of my past conference talks? Let’s fix that.

I’m sharing my favorites—packed with real-world advice, lessons, and a few laughs.

“Pushing Left, Like a Boss”
📽️ https://twp.ai/4iporz

#CyberSecurity #SecurityAwareness #appsec #shiftleft

#DesignTookitForFigma from #BrowserStack is quite limited in free version, but you cannot pay for the plugin alone, you have to buy into the monthy / yearly testing plan ;) #a11y #figma #testing #ShiftLeft
https://www.browserstack.com/blog/introducing-the-accessibility-design-toolkit-for-figma/

🎥 Missed one of my past conference talks? Let’s fix that.

I’m sharing my favorites—packed with real-world advice, lessons, and a few laughs.

“Pushing Left, Like a Boss”
📽️ https://twp.ai/4intEp

#CyberSecurity #SecurityAwareness #appsec #shiftleft

🎥 Missed one of my past conference talks? Let’s fix that.

I’m sharing my favorites—packed with real-world advice, lessons, and a few laughs.

“Pushing Left, Like a Boss”
📽️ https://twp.ai/4intEp

#CyberSecurity #SecurityAwareness #appsec #shiftleft

🎥 Missed one of my past conference talks? Let’s fix that.

I’m sharing my favorites—packed with real-world advice, lessons, and a few laughs.

“Pushing Left, Like a Boss”
📽️ https://twp.ai/4in9rw

#CyberSecurity #SecurityAwareness #appsec #shiftleft

🎥 Missed one of my past conference talks? Let’s fix that.

I’m sharing my favorites—packed with real-world advice, lessons, and a few laughs.

“Pushing Left, Like a Boss”
📽️ https://twp.ai/4in9rw

#CyberSecurity #SecurityAwareness #appsec #shiftleft

What do I think of "Shift Left"? Hear my answer to my friend Laura Bell's question.
https://twp.ai/4inupD

#appsec #shiftleft #applicationsecurity

What do I think of "Shift Left"? Hear my answer to my friend Laura Bell's question.
https://twp.ai/4inupD

#appsec #shiftleft #applicationsecurity

🎙️ When AI writes code, builds models, and simulates threats… who checks the checker?

In this last On Location Conversation from #RSAC2025, Alex Kreilein and John Sapp Jr. join Sean Martin, CISSP to explore what trust actually means in the age of AI-generated security tooling — and how modern #AppSec teams must rethink validation, #resiliency, and #risk.

This episode cuts deep into:

Why “trust the output” is not enough in AI-driven workflows
How #AI security debt is becoming the new tech debt
Why we need #zerotrust thinking applied to models and agents
The real shift: from patching CVEs to building resilient architecture
The role of traceability, governance, and context-driven decision-making

If you’re serious about secure AI, application security, and shifting AppSec left (the right way), this conversation will challenge what you think you know — and help reframe what secure development actually looks like.

🎥 Watch the full video:
👉 https://youtu.be/kJdQz9LmT6s

🎧 Listen to the audio podcast:
👉 https://eventcoveragepodcast.com/episodes/why-we-cant-completely-trust-the-intern-even-if-its-ai-an-rsac-conference-2025-conversation-with-alex-kreilein-and-john-sapp-jr-on-location-coverage-with-sean-martin-and-marco-ciappelli

✨ Thank you to our Full Coverage Sponsors:
ThreatLocker 👉 https://itspm.ag/threatlocker-r974
Akamai Technologies 👉 https://itspm.ag/akamailbwc
BLACKCLOAK 👉 https://itspm.ag/itspbcweb
SandboxAQ 👉 https://itspm.ag/sandboxaq-j2en
Archer Integrated Risk Management 👉 https://itspm.ag/rsaarchweb
ISACA 👉 https://itspm.ag/isaca-96808
Object First 👉 https://itspm.ag/object-first-2gjl
Edera 👉 https://itspm.ag/edera-434868

🎙️ Explore more RSAC 2025 coverage:
👉 https://www.itspmagazine.com/rsa-conference-usa-2025-rsac-san-francisco-usa-cybersecurity-event-infosec-conference-coverage

🎧 Catch all of our event conversations:
👉 https://www.itspmagazine.com/technology-and-cybersecurity-conference-coverage

🎤 Want to tell your Brand Story Briefing as part of our coverage?
👉 https://itspm.ag/evtcovbrf

📆 Want Sean Martin, CISSP and Marco Ciappelli to cover your event or moderate your panel?
👉 https://www.itspmagazine.com/contact-us

#RSAC2025 #cybersecurity #AppSec #AIsecurity #zerotrust #infosec #securityleadership #riskmanagement #technology #eventcoverage #secureAI #shiftleft #CISO

🎙️ When AI writes code, builds models, and simulates threats… who checks the checker?

In this last On Location Conversation from #RSAC2025, Alex Kreilein and John Sapp Jr. join Sean Martin, CISSP to explore what trust actually means in the age of AI-generated security tooling — and how modern #AppSec teams must rethink validation, #resiliency, and #risk.

This episode cuts deep into:

Why “trust the output” is not enough in AI-driven workflows
How #AI security debt is becoming the new tech debt
Why we need #zerotrust thinking applied to models and agents
The real shift: from patching CVEs to building resilient architecture
The role of traceability, governance, and context-driven decision-making

If you’re serious about secure AI, application security, and shifting AppSec left (the right way), this conversation will challenge what you think you know — and help reframe what secure development actually looks like.

🎥 Watch the full video:
👉 https://youtu.be/kJdQz9LmT6s

🎧 Listen to the audio podcast:
👉 https://eventcoveragepodcast.com/episodes/why-we-cant-completely-trust-the-intern-even-if-its-ai-an-rsac-conference-2025-conversation-with-alex-kreilein-and-john-sapp-jr-on-location-coverage-with-sean-martin-and-marco-ciappelli

✨ Thank you to our Full Coverage Sponsors:
ThreatLocker 👉 https://itspm.ag/threatlocker-r974
Akamai Technologies 👉 https://itspm.ag/akamailbwc
BLACKCLOAK 👉 https://itspm.ag/itspbcweb
SandboxAQ 👉 https://itspm.ag/sandboxaq-j2en
Archer Integrated Risk Management 👉 https://itspm.ag/rsaarchweb
ISACA 👉 https://itspm.ag/isaca-96808
Object First 👉 https://itspm.ag/object-first-2gjl
Edera 👉 https://itspm.ag/edera-434868

🎙️ Explore more RSAC 2025 coverage:
👉 https://www.itspmagazine.com/rsa-conference-usa-2025-rsac-san-francisco-usa-cybersecurity-event-infosec-conference-coverage

🎧 Catch all of our event conversations:
👉 https://www.itspmagazine.com/technology-and-cybersecurity-conference-coverage

🎤 Want to tell your Brand Story Briefing as part of our coverage?
👉 https://itspm.ag/evtcovbrf

📆 Want Sean Martin, CISSP and Marco Ciappelli to cover your event or moderate your panel?
👉 https://www.itspmagazine.com/contact-us

#RSAC2025 #cybersecurity #AppSec #AIsecurity #zerotrust #infosec #securityleadership #riskmanagement #technology #eventcoverage #secureAI #shiftleft #CISO

Keynote von Martin Haunschmid: Security ist so schlimm wie vor 20 Jahren
Die Keynote von Martin Haunschmid zeigt drastisch, wie wichtig es ist, Cybersecurity frühzeitig in der Entwicklung zu berücksichtigen.
https://www.se-trends.de/keynote-martin-haunschmid-security/
#Anforderungen #Veranstaltungen #Angriffssicherheit #DSGVO #MartinHaunschmid #OWASP #ReConf #ShiftLeft #ThreatModel

Shifting Left isn’t just a buzzword - it’s the foundation for efficiency in your organization!

By making clean, reliable, and accessible data available across your organization, you reduce complexity and unlock time to focus on higher-value work.

💡 Data products are the foundation of this #ShiftLeft, enabling healthy, scalable data communication.

📖 Dive into the details in the #InfoQ article: https://bit.ly/3WHjxsf

#SoftwareArchitecture #DataMesh #DataLake #DataPipelines #ETL

Shifting Left isn’t just a buzzword - it’s the foundation for efficiency in your organization!

By making clean, reliable, and accessible data available across your organization, you reduce complexity and unlock time to focus on higher-value work.

💡 Data products are the foundation of this #ShiftLeft, enabling healthy, scalable data communication.

📖 Dive into the details in the #InfoQ article: https://bit.ly/3WHjxsf

#SoftwareArchitecture #DataMesh #DataLake #DataPipelines #ETL

A #ShiftLeft approach to #DataProcessing relies on data products, which form the basis of data communication across the business.

This addresses many flaws in traditional data processing and makes data more relevant, complete, and trustworthy.

#InfoQ article: https://bit.ly/3WHjxsf

#SoftwareArchitecture #DataMesh #DataLake #DataPipelines #ETL

Testing should shift left! But what if we’ve been thinking about it all wrong? What if the answer isn’t "earlier" but "smarter"? A 10x perspective on QA that might change how you see testing forever. Read Steve Pool: https://javapro.io/2025/01/27/thinking-differently-about-testing/

#SoftwareTesting #Java #DevOps #ShiftLeft #QualityAssurance #JAVAPRO #DevOps

Me: Alright, everyone from the C-suite down is excited about this whole shit-left business, so the CI system is going to flag any changes you make that increase the number of warnings. The idea is that we don’t let it get to be overwhelming and start having real issues pop up from easily preventable stuff.
Team lead: hey, I’m gonna need to turn that off. It’s slowing us down too much to evaluate whether each of these warnings is worth investigating.
Me: So, you want to wait until we have a time-critical release and Release Engineering is screaming about being overdue to go through the whole backlog?
Them: Well, no, I wouldn’t put it that way.
Me: So, you’re going to schedule regular issue pruning in the HIP sprints?
Them: *looking uncomfortable* Maybe? We were hoping to use those to catch up on other stuff.
#ShiftLeft #DevOps

Geht das zusammen? 3 Strategien für Cybersecurity und agiles Systems Engineering
In diesem Artikel werden 3 Strategien vorgestellt, um Cybersecurity und agiles Systems Engineering zusammenzubringen.
https://www.se-trends.de/3-strategien-fuer-cybersecurity-und-agiles-se/
#Agilitt #Wissen #Angriffssicherheit #Cybersecurity #DevSecOps #ShiftLeft #ZeroTrust

In this week's #ITOps Query #podcast, Adrian Sanabria and I discuss the recent #CISA report that raised doubts about the basis for #shiftleft and #securebydesign movements in #devsecops, and where the industry goes from here. https://itopsquery.podbean.com/e/questioning-shift-left-changing-tech-and-security-roles/

Securing the Software Supply Chain: Checkmarx One Expands its Offerings – Source: securityboulevard.com https://ciso2ciso.com/securing-the-software-supply-chain-checkmarx-one-expands-its-offerings-source-securityboulevard-com/ #SecurityBoulevard(Original) #softwaresupplychainsecurity #rssfeedpostgeneratorecho #SupplyChainSecurity #CyberSecurityNews #SecurityBoulevard #SocialFacebook #SocialLinkedIn #shiftleft #Spotlight #zerotrust #FEATURED #SocialX #SBOMs

The Three Pillars of Shift-Left API Security – Source: securityboulevard.com https://ciso2ciso.com/the-three-pillars-of-shift-left-api-security-source-securityboulevard-com/ #SecurityBoulevard(Original) #rssfeedpostgeneratorecho #CyberSecurityNews #SecurityBoulevard #SocialFacebook #SocialLinkedIn #Cybersecurity #APIsecurity #shiftleft #SocialX #DevSec #api

The introduction of AI has triggered a profound transformation in the landscape of offensive security. #AISecurity #OffensiveSecurity #Cybersecurity #PenTesting #ShiftLeft
https://jpmellojr.blogspot.com/2024/10/how-ai-is-becoming-powerful-tool-for.html

It’s Time To Start Shifting Left

https://thenewstack.io/its-time-to-start-shifting-left/

"Companies need to incorporate quality into their product development process from the start." -- #JuanRodriguez

#api360 #sdlc #shiftLeft

A DevOps Concept: #ShiftLeft

The practice of employing techniques to ensure the readiness of code before it hits production environments.

For example: Teams may add #Loadtesting of their code in their deployment pipeline. #Scrum teams might add this to their Definition of Done.