SOSS Community Day Europe 2024

Modern cloud native and DevOps practices have placed repositories at the heart of application development, storing our business critical code & config data. One unique benefit of providing a SaaS security platform are the sheer volumes of insights that can be derived to level up industry-wide security. In this talk we'll share real telemetry data from thousands of scanned repositories highlighting some of the worst of security in practice even in the most evolved engineering organizations. We'll share real world examples of some of the most prevalent application security anti-patterns, including secrets & other most common misconfigurations and bad practices across code, cloud and the CI/CD pipeline itself – join us on a voyeuristic journey that perhaps will also provide some therapeutic validation that you are not alone in some of these bad decisions. Understanding these threats will help equip your developers and security teams with the knowledge to avoid common mistakes.