Security

Ready to explore our blueprint for AI-powered development? Join us to network with local tech leaders and learn the key to addressing tech debt, modernizing the software development lifecycle, and transforming your enterprise.

Ready to explore our blueprint for AI-powered development? Join us to network with local tech leaders and learn the key to addressing tech debt, modernizing the software development lifecycle, and transforming your enterprise.

Ready to explore our blueprint for AI-powered development? Join us to network with local tech leaders and learn the key to addressing tech debt, modernizing the software development lifecycle, and transforming your enterprise.

Ready to explore our blueprint for AI-powered development? Join us to network with local tech leaders and learn the key to addressing tech debt, modernizing the software development lifecycle, and transforming your enterprise.

Ready to explore our blueprint for AI-powered development? Join us to network with local tech leaders and learn the key to addressing tech debt, modernizing the software development lifecycle, and transforming your enterprise.

Maintaining and developing SDKs for a multiple of languages and platforms can be time consuming and laborious. While there are many ways to tackle such a feat, using open api spec, the biggest issue I've come across is generating SDKs that consume your service in a way that developers can use them. In this talk we are going to look at some ways to create your own customisable SDK generation service, Utilising openapi generator tools and ways to test against multiple language types.

Many of you may be familiar with GitHub for your own Open Source (OSS) projects. But, did you know that you can run your end-to-end development within your organization using GitHub Enterprise? Join Chris for a whistle-stop tour in the day-in-the-life of a developer with GitHub Codespaces, GitHub Copilot, GitHub Actions and GitHub Advanced Security, showing how you can bring Open Source best practices into your day-to-day work (also known as InnerSource)!

A new phenomenon stand out in recent years: security must pervade the entire software development lifecycle. Except it isn't. Current generation of processes and tools is lacking crucial features to properly manage modern security risks. Think of the Log4J event. Were you able to identify all affected components? Were they internally developed, or you need a vendor support? How fast you were able to deliver a fix? In this talk we'll explore the challenges, what you can do with current tools, and which gaps should be addressed by communities through better practices and new tools.

In this session, Chris is joined by DeveloperSteve Coochin, a Developer Advocate at Snyk. In this episode, Chris and Steve talk about vulns in the wild for a bit (well and to geek out in general), especially on the back of some research that Steve did recently on the likes of PHP. Steve has recently been looking into the security vulns that get let in without developers even knowing (Teaser: He was really surprised at some of them!)

When using Azure Kubernetes Service (AKS), there's a chance that kubenet might be the only possible choice due to your requirements. If so, you may still want to use Application Gateway Ingress Controller (AGIC) to leverage Azure Application Gateway's Web Application Firewall (WAF) capabilities. In this session, we will make the journey together to have a working AGIC in an AKS cluster with kubenet and managed identities.