DevSecOps Tool Hands-On Session with Najib

This session is designed for engineers and security practitioners who want hands-on, practical experience with leading DevSecOps tools in real-world scenarios. We’ll dive into actual pipelines, dashboards, or IaC code and work through:

-Integrating SAST tools like Coverity or SonarQube into CI/CD
-Using SCA tools like BlackDuck or OWASP Dependency-Check
-Generating and analyzing SBOMs (Software Bill of Materials)
-Setting up secrets detection or container scanning tools
-Writing custom security gates for build pipelines
-Triage workflow for managing and prioritizing security findings

You’ll walk away with a clearer understanding of tool setup, best practices, and how to fit them into your existing environment.

Bring your project or use a sample repo provided during the session!