⚙️ Harden Your DevSecOps Pipeline Workshop!

𝗟𝗘𝗩𝗘𝗟 𝗨𝗣 𝗬𝗢𝗨𝗥 𝗖𝗜/𝗖𝗗: 𝗕𝗨𝗜𝗟𝗗𝗜𝗡𝗚 𝗔 𝗦𝗘𝗖𝗨𝗥𝗘 𝗣𝗜𝗣𝗘𝗟𝗜𝗡𝗘 𝗪𝗜𝗧𝗛 𝗢𝗦𝗦 (4h Workshop) with 𝗔𝗡𝗗𝗢𝗡𝗜 𝗔𝗟𝗢𝗡𝗦𝗢 & 𝗣𝗔𝗖𝗢 𝗦𝗔𝗡𝗖𝗛𝗘𝗭
What’s the "perfect" secure CI/CD pipeline? This hands-on 4h workshop shows you using open-source tools: integrate SAST (Semgrep), SCA, secrets detection (TruffleHog), IaC scanning, container vuln checks (Trivy), and more across the full DevSecOps lifecycle. Through live demos (break & fix), you’ll see each stage’s security goal, tool integration, and principles – not just copy-paste, but adaptable techniques for your own hardened pipelines.

Led by Andoni Alonso https://bsky.app/profile/andoniaf.unicrons.cloud (Prowler Open Cloud Security, unicrons.cloud founder, ex-SRE turned security/CTF pro) & Paco Sanchez https://pretalx.com/bsidesluxembourg-2026/speaker/UNNQE8/ (SRE in Developer Productivity/Platform Engineering, pragmatic tool-builder).

📅 Conference Dates: 6–8 May 2026 | 09:00–18:00
📍 14, Porte de France, Esch-sur-Alzette, Luxembourg
🎟️ Tickets: https:// 2026.bsides.lu/tickets/
📅 Schedule Link: https://pretalx.com/bsidesluxembourg-2026/schedule/

Build secure pipelines that actually work – OSS only! 🚀
#BsidesLuxembourg #OSS #OpenSource #SecurePipeline #CICD #DevSecOps