When I see the term “shift left” used in marketing, I’m surprised at how often the content revolves entirely around surfacing issues to developers (the easy part) with no discussion around actual remediation (the hard part). I wrote a blog post that covers what it takes to ensure developers actually fix the issues that are brought to them - give it a read and let me know what you think! https://lnkd.in/gKCdcNTa
Isaac Evans’ Post
More Relevant Posts
-
if you're interested in implementing secure guardrails in your organization: download Semgrep's webinar with @techstrong about creating secure software without compromising productivity! with Leif Dreizler and Mitch Ashley: https://lnkd.in/gunY4SkD #appsec #secureguardrails
Secure Guardrails in Software Development
webinars.techstronglearning.com
-
I wrote a scorecard for shifting left. Not there yet, but Semgrep's goal is to eventually make an A+ possible for every category: https://lnkd.in/gKCdcNTa
-
-
shoutout to Kyle Kelly for a detailed writeup comparing what Semgrep & others mean when they use the term "reachability" for supply chain analysis! https://lnkd.in/gQ2n2Uua
-
If you are in the Bay Area, this should be a good time! We're hosting a AppSec community networking event with sushi making on Jan 25 https://lnkd.in/gHthU5Gz
It's all about manual transmissions