CI/CD Pipeline Insights
Rey discusses the inherent latency introduced by adding tools into a CI/CD pipeline, emphasizing that while frustrations may arise, modern toolchains are generally efficient. He highlights the unique challenges posed by large and legacy codebases, noting that there’s no one-size-fits-all solution. The conversation also touches on findings from a white paper, revealing distinct security flaws associated with various programming languages, prompting a discussion on the architectural implications of these vulnerabilities.In this clip
From this podcast
Software Engineering Radio - the podcast for professional software developers
Episode 475: Rey Bango on Secure Coding Veracode
Related Questions
What is the software development cycle for a coder as discussed in the episode Episode 475: Rey Bango on Secure Coding Veracode and the clip Secure Coding Practices?
How do I know if I'm overengineering and doing too much upfront design in software architecture for the episode Episode 427: Sven Schleier and Jeroen Willemsen on Mobile Application Security and the clip Leveraging Security Frameworks?
How do I know if I'm overengineering and doing too much upfront design in software architecture in the context of the episode Google’s Engineering Practices – Code Review Standards and the clip Code Review Challenges?