How to Automate Application Security - the DevSecOps way

This repo contains the material for the How to Automate Application Security - the DevSecOps way workshop.

Prerequisites

1. Create an AWS account.
2. Install the AWS CLI and configure it to use your account.
3. Install the Terraform CLI.

Agenda

0. Install Jenkins

Installation of Jenkins can be done in a lot of places. We would have 2 possibilities - install in AWS via Terraform or install locally in a docker conatiner. Installation of Jenkins in AWS will lead to adidtional charges. Free tier machines are not enough for running Jenkins

1. Pull and Test

2. Static Application Security Testing

3. Software Composition Analysis

4. Build

5. Container Build and Push

6. Container Image Scan

7. Deploy

8. Dynamic Application Security Testing