014 - Let's talk about Azure DevOps and embracing DevSecOps

In this episode, we're talking about what Azure DevOps is, in broad terms - and how DevSecOps fit into the picture. Embracing a Security Development Lifecycle (SDL), ensuring consistent and high-quality software in your pipelines, embracing the security mindset already before it goes into the pipeline, and more.

Show Notes

Show notes:

• Azure DevOps (Microsoft)
• Secure DevOps (Microsoft Security Engineering)
• Embrace a Security Development Lifecycle (SDL) for Azure (Zimmergren.net)
• Automate Azure DevOps code security analysis with the Microsoft Security Code Analysis extension (Zimmergren.net)
• Get started with Azure DevOps (Microsoft Learn)

Creators and Guests

Host

Jussi Roine

Bridging the gap between business and security 🛡 Senior Security Architect at Not Bad Security | Microsoft MVP/MCM

Host

Tobias Zimmergren

CTO, co-founder at pons.io | Co-host ctrlaltazure.com | Ex-Microsoft, ex-MVP.

What is Ctrl+Alt+Azure?

Weekly conversations for cloud architects, developers, CIOs, and CISOs navigating Microsoft Azure, cloud adoption strategy, security governance, identity, and agentic AI. Hosted by industry experts Tobias Zimmergren and Jussi Roine.