Implementing DevSecOps in Production with Stackrox and Tekton

Explore a comprehensive DevSecOps implementation strategy in this 29-minute conference talk from DevConf.CZ 2024. Learn how to leverage Stackrox, Tekton, and other open-source security tools like Sigstore to build robust production pipelines. Discover techniques for eliminating security risks in CI/CD processes, securing the software supply chain through continuous scanning and runtime protection, and shifting security left to detect and remediate vulnerabilities early. Gain insights into providing automated guardrails for developers by integrating Stackrox with DevOps and security tools such as Sigstore and Quay. Presented by Roberto Carratalá and Philipp Bergsmann, this session offers practical guidance for constructing secure and efficient DevSecOps workflows in production environments.