Episode 475: Rey Bango on Secure Coding Veracode

Shift-Left Security

Shift-left security emphasizes embedding security features early in the software development lifecycle. Rey Bango highlights the importance of considering security from the initial stages of application development, even before writing a single line of code 1. He mentions the concept of security champions within organizations to mentor and guide developers in secure coding practices 2.

You should be thinking about how security plays a role within your whole entire lifecycle.

--- Rey Bango

This proactive approach helps in identifying potential vulnerabilities early, reducing the risk of security breaches later in the development process.

   

Secure CI/CD Pipelines

Integrating security measures into CI/CD pipelines is crucial for maintaining robust software security. Rey Bango acknowledges the challenges developers face with added latency in pipelines but emphasizes the necessity of these security checks 3. He advises that while initial implementation may be cumbersome, it eventually becomes a seamless part of the development workflow 4.

It's a journey. When you're implementing tooling, you're going to have some pain points.

--- Rey Bango

This integration ensures that security is not compromised for performance, ultimately leading to more secure and efficient software.