An Open Source DevSecOps Platform for Securing Code & Dependencies
ShiftLeft Scan is an open-source platform designed to make automating security, as part of modern software development lifecycles, as easy as pie. It provides efficient workflows to get the right developer the right vulnerability information at the right time, without slowing release velocity. Specifically, ShiftLeft Scan’s workflow integrates:
Static code analysis for custom code
Hard-coded secret detection
Software composition analysis for CVEs in open source libraries
Open source licensing checks
into the IDE, as part of pull requests or build systems.
ShiftLeft Scan is itself open source and free (under the GPLv3 license) and also leverages the best existing open-source tools to deliver broad programming language support across its many features. This webinar will be delivered by the ShiftLeft Lead Architect and creator of ShiftLeft Scan, Prabhu Subramanian. It will cover the following:
The security challenges posed by modern software development life cycles
Introduction to ShiftLeft Scan DevSecOps platform
Static Code Analysis (SAST)
Software Composition Analysis (SCA)
Demonstration of ShiftLeft Scan features & workflow
Thoughts on workflows & integrations
Q&A