Bringing People, Process and Technology together!

In this video, I’ll walk you through how Platform Engineering serves as the backbone for successful Agile Release Trains (ARTs) in the Scaled Agile Framework (SAFe). I’ll explain how continuous delivery pipelines, DevOps automation, and structured teams reduce complexity and enable faster value delivery in large organizations. This talk was recorded due to popular demand from the SAFe Leadership Forum in Zürich, Switzerland. You’ll also get a live demo of a platform I helped build for LGT as part of their digital transformation journey. Key Takeaways: ⚙️ Platform Engineering simplifies and streamlines DevOps in SAFe. 🚂 Continuous delivery pipelines form the foundation of efficient Agile Release Trains. 🧠 The role of Team Topologies in reducing cognitive load and improving team performance. 💻 Live demo: How platforms enable self-service, automation, and faster delivery for Agile teams. 📈 Why Platform Engineering is a top tech trend for 2024, driving the industrialization of software development. See how platform engineering builds your platform, which serves as the railroad tracks for your ARTs and enables your agile teams to do DevOps seamlessly. ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00 Introduction 00:28 About me 02:40 The focus 03:46 The Continuous Delivery Pipeline 04:33 You build it you run it 05:45 Thin about that on scale 06:20 Team Toplogies 07:25 Team Topologies in SAFe 07:47 Team Toplogies in SAFe Terminology 08:06 The Platform Agile Release Train 08:57 Platform Engineering 11:23 Architecture of a Platform 13:12 Floating Platform 14:24 Demo of a platform 26:29 Market view 27:31 Summary ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ SAFe Leadership Forum: ➤https://www.safe-leadership-forum.ch/ SAFe ➤https://scaledagileframework.com/ Kegon: ➤https://www.kegon.ch/ Platform Plane: ➤https://www.platformplane.com/ Zühlke: ➤ https://www.zuehlke.com/ ▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬ You're developing products, not projects ➤ https://youtu.be/ImbhUFr6suw?si=UeSOAR67hZcJWE5T DevOps ➤ https://youtu.be/Ath3XoLbYxY?si=xzJzs4Fqpst6uxqm Apply continous testing and build-in quality ➤ https://youtu.be/W0QZRpf7ElM?si=oe54rFG0uEXtHUbJ Apply continous security ➤ https://youtu.be/340YmM08Eb0?si=QFOGkCnUElDXevR- Build a platform ➤ https://youtu.be/UE8mSt55xHw?si=cc6_S_6Wv6iwA_y1 ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Modern Software Engineering https://www.youtube.com/playlist?list=PLrsbMazVPK_rb56rZQr2fyBGR3cyanZpX DevOps https://www.youtube.com/playlist?list=PLrsbMazVPK_ro3fn1G-3Ui2mBPHxOD9kF GitLab: Build a DevSecOps Pipeline https://www.youtube.com/playlist?list=PLrsbMazVPK_qhf3ahA_zRPlwBaGGhSu2P #platformengineering #devsecops #devops #romanoroth

In this keynote, I share insights on how to successfully architect for continuous delivery using DevOps methodologies. Discover how to break down organizational silos, enhance software delivery performance, and implement essential practices like continuous testing, security, and platform engineering. This talk was recorded due to popular demand from the Roche DevOps Conference 2024 in Poznan, Poland. Key Topics: 🧱 Breaking silos and optimizing the value stream 🛠️ Understanding the 24 key capabilities of DevOps 📊 Measuring performance with DORA Metrics 🧪 Continuous testing and shifting left with TDD and BDD 🔐 Integrating security into the development pipeline 🚀 The role of platform engineering in DevOps transformation ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00 Introduction 00:44 About Me 02:48 Today challengs 05:28 DevOps 06:02 People 07:17 Definition of DevOps 07:29 Build the right thing right 08:45 The 24 Key capabilities 10:06 The science behind DevOps 11:36 How to measure the software delivery performance? 12:11 The DORA Metrics 16:26 The benefits of DevOps 17:33 Value Stream Mapping 22:11 Product Development 23:00 Built-in quality 25:21 Shift-Left 27:26 Test Pyramid 28:43 Continuous Quality Assurance 30:07 Built-in security 30:55 DevSecOps 32:10 Continuous Security 32:42 Built for operability 33:05 Evolution of monitoring 35:15 Architect for operability 36:20 Build a platform 36:32 Market view 37:07 Modern Software Development 37:34 Platform Engineering 39:29 Summary 41:44 End ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ Roche: ➤https://www.roche.com/ Zühlke: ➤ https://www.zuehlke.com/ ▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬ You're developing products, not projects ➤ https://youtu.be/ImbhUFr6suw?si=UeSOAR67hZcJWE5T DevOps ➤ https://youtu.be/Ath3XoLbYxY?si=xzJzs4Fqpst6uxqm Apply continous testing and build-in quality ➤ https://youtu.be/W0QZRpf7ElM?si=oe54rFG0uEXtHUbJ Apply continous security ➤ https://youtu.be/340YmM08Eb0?si=QFOGkCnUElDXevR- Build a platform ➤ https://youtu.be/UE8mSt55xHw?si=cc6_S_6Wv6iwA_y1 ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Modern Software Engineering https://www.youtube.com/playlist?list=PLrsbMazVPK_rb56rZQr2fyBGR3cyanZpX DevOps https://www.youtube.com/playlist?list=PLrsbMazVPK_ro3fn1G-3Ui2mBPHxOD9kF GitLab: Build a DevSecOps Pipeline https://www.youtube.com/playlist?list=PLrsbMazVPK_qhf3ahA_zRPlwBaGGhSu2P #devops #platformengineering #devsecops #romanoroth

In this video, we explore the evolving world of DevOps and the rising importance of Platform Engineering in modern software development. Due to popular demand, I've recorded this talk from Roche Platform Day 2024 in Poznan, Poland. This talk covers the challenges DevOps teams face today and how platform engineering can simplify processes, reduce complexity, and improve developer experience. Key Topics: 💡 What DevOps is and why it’s essential for continuous delivery 🚀 The rise of Platform Engineering and its benefits 📈 Scaling DevOps effectively in large organizations 🛠️ A live demo of a Platform 🤖 The future of AI/ML integration in platform engineering 🏭 The Digital Factory and the industrialization of software development ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00 Introduction 00:34 About me 02:50 DevOps 03:25 Benefits of DevOps 04:32 But... DevOps is dead 05:14 Modern Software Development 05:39 You build it you run it 08:10 What do we want to have? 13:27 The Digital Factory 14:18 Platform Engieering 15:52 Target Operating Model 17:23 Platform Engineering enables DevOps 19:39 Market analysis 20:28 High Level Architecture of a Platform 23:27 Floating Platform 24:52 AI in Platform Engineering 26:13 AI as a service 27:46 Demo of a platform 44:23 Summary 46:11 End ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ Platform Plane: ➤https://www.platformplane.com/ Roche: ➤https://www.roche.com/ Zühlke: ➤ https://www.zuehlke.com/ ▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬ You're developing products, not projects ➤ https://youtu.be/ImbhUFr6suw?si=UeSOAR67hZcJWE5T DevOps ➤ https://youtu.be/Ath3XoLbYxY?si=xzJzs4Fqpst6uxqm Apply continous testing and build-in quality ➤ https://youtu.be/W0QZRpf7ElM?si=oe54rFG0uEXtHUbJ Apply continous security ➤ https://youtu.be/340YmM08Eb0?si=QFOGkCnUElDXevR- Build a platform ➤ https://youtu.be/UE8mSt55xHw?si=cc6_S_6Wv6iwA_y1 ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Modern Software Engineering https://www.youtube.com/playlist?list=PLrsbMazVPK_rb56rZQr2fyBGR3cyanZpX DevOps https://www.youtube.com/playlist?list=PLrsbMazVPK_ro3fn1G-3Ui2mBPHxOD9kF GitLab: Build a DevSecOps Pipeline https://www.youtube.com/playlist?list=PLrsbMazVPK_qhf3ahA_zRPlwBaGGhSu2P #platformengineering #devops #devsecops #romanoroth

In this talk from Conf42: Platform Engineering, I dive deep into AI-Augmented DevOps and how platform engineering plays a critical role in transforming development processes. I walk through how AI can help identify bottlenecks, streamline workflows, and boost the quality of software delivery, while also explaining the importance of building scalable, self-service platforms that integrate AI seamlessly. What you'll learn: 🛠️ How to use value stream mapping to find inefficiencies 🤖 Key AI use cases across the DevOps cycle to improve the value stream 🔗 The concept of architecting a floating platform 💻 A real-world demo of the AI-augmented use cases in a platform ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00 Intro 00:14 Welcome 00:22 Romano Roth 02:40 Business: AI is a game changer! 03:52 Modern Software Development 04:19 Value Stream Mapping 07:52 Iterativly resolve the greates constraints 08:16 AI-Augmented DevOps use cases to optimize the value stream 10:12 The foundation 10:22 Industrialization of Software Development 11:38 Target Operation Model with Platform Engineering 12:29 Digital Product Organization 13:31 High Level Architecture of a Platform 15:29 Floating Platform 16:48 Where is AI? 17:12 AI as a Service 18:17 Demo 26:12 Summary 29:03 Clsoing ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ Conf42: ➤ https://www.conf42.com/platform2024 Talk: ➤ https://www.conf42.com/Platform_Engineering_2024_Romano_Roth_aiaugmented_devops_engineering Platform Plane: ➤ https://youtu.be/rSUI6-R4DlM LGT: ➤ https://www.lgt.com/ ▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬ Unlocking the Power of AI: Deep Dive into MLOps, Machine Learning, Generative AI and AI/ML Platforms ➤ https://youtu.be/elV3uGeA6io Harnessing the Power of Enterprise Architecture & Artificial Intelligence for Strategic Benefit ➤ https://youtu.be/rsM1rwHi82o?si=fvVapZ2teF4bRyuz Platform Engineering ➤ https://youtu.be/MeP437lZiwM?si=d1pbT3KnWgbz4kr_ ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Modern Software Engineering https://www.youtube.com/playlist?list=PLrsbMazVPK_rb56rZQr2fyBGR3cyanZpX DevOps https://www.youtube.com/playlist?list=PLrsbMazVPK_ro3fn1G-3Ui2mBPHxOD9kF GitLab: Build a DevSecOps Pipeline https://www.youtube.com/playlist?list=PLrsbMazVPK_qhf3ahA_zRPlwBaGGhSu2P #devsecops #devops #github #romanoroth

Welcome to our deep dive into the fascinating world of Artificial Intelligence (AI), Machine Learning (ML), Deep Learning, Generative AI (GenAI) and AIML Platforms! In this video, we explore how companies are leveraging these technologies to build and continuously improve cutting-edge AI applications using MLOps (Machine Learning Operations) based on robust AI/ML platforms. What You'll Learn: 🤖 Understanding AI, ML, Deep Learning, and Generative AI: Get a clear explanation of these key concepts and how they interrelate. 🛠️ MLOps Essentials: Discover the importance of MLOps in developing, deploying, and maintaining ML models in production. 🌐 Real-World Use Cases: Learn about practical applications such as Retrieval Augmented Generation (RAG) and how they are implemented in enterprises. 🔄 ML Life Cycle: Understand the stages of the ML life cycle, from idea generation and local development to continuous monitoring and improvement. 🚀 MLOps Capabilities: Explore the essential capabilities needed for effective MLOps, including experimentation environments, data tracking, reproducible pipelines, and model registries. 📈 Business Benefits: Find out how MLOps can accelerate time to market, improve efficiency, and ensure regulatory compliance. 💻 AI/ML Platforms: Understand the importance of a unified AI/ML platform that provides all necessary tools and capabilities for seamless development, deployment, and monitoring of AI solutions. ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00:00 Intro 00:00:07 What is MLOps? 00:00:34 Romano Roth 00:00:39 AI Everywhere 00:01:02 Artifical Intelligence, Machine Learning, Deep Learning, Generative AI 00:03:46 Introdcution to the ML Use Case: Retrieval Augmented Generation (RAG) 00:05:03 The ML Use Case: Retrieval Augmented Generation (RAG) 00:06:30 From ML Use Case to Production 00:08:56 The ML Life Cycle 00:11:48 MLOps 00:12:46 MLOps vs. LLMops 00:12:56 Mops? 00:13:08 LLMops 00:14:15 DevOps and MLOps and LLMOps 00:15:41 Who is MLOps 00:17:00 MLOps is a Continuous Process 00:22:44 Think: ML Life Cycle 00:24:51 Key Benefits of MLOps 00:27:59 MLOps Capabilities 00:30:31 MLOps Architecture 00:31:41 MLOps Architecture Example 00:33:42 Tools for Development of ML Solutions 00:36:35 Outlook 00:37:50 MLOps Maturity 00:40:08 MLOps Needs The Right Foundation 00:42:50 A Platform Offers AI and ML Capabilities “as a Service” to the Company. 00:45:25 Demo 00:46:01 Platform Plane 00:46:49 Documentation AI Assistant 00:47:41 Container Analysis with AI 00:49:23 Zühlke Reference Finder 00:50:36 Observability 00:51:01 Add Applications 00:52:27 Anaylze Logs with AI 00:53:06 Zühlke ZenAI 00:57:30 Architecture of a Platform 00:59:16 Architecture of ML Use Cases with a Platform 01:02:55 Summary 01:05:25 Final Words 01:05:26 Outro ▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬ Harnessing the Power of Enterprise Architecture & Artificial Intelligence for Strategic Benefit https://youtu.be/rsM1rwHi82o?si=fvVapZ2teF4bRyuz Platform Engineering https://youtu.be/MeP437lZiwM?si=d1pbT3KnWgbz4kr_ ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Modern Software Engineering https://www.youtube.com/playlist?list=PLrsbMazVPK_rb56rZQr2fyBGR3cyanZpX DevOps https://www.youtube.com/playlist?list=PLrsbMazVPK_ro3fn1G-3Ui2mBPHxOD9kF GitLab: Build a DevSecOps Pipeline https://www.youtube.com/playlist?list=PLrsbMazVPK_qhf3ahA_zRPlwBaGGhSu2P #devsecops #devops #github #romanoroth

Welcome to my latest presentation on "Harnessing Enterprise Architecture & AI for Strategic Advantage." This talk, originally delivered at the Lucerne University of Applied Sciences and Arts in association with the Digital Veterans Association on July 10, 2024, delves into the powerful integration of Enterprise Architecture (EA) and Artificial Intelligence (AI) to drive strategic benefits for organizations. In this talk I cover: 🏛️ The fundamentals of Enterprise Architecture and its holistic approach to aligning business and IT strategies. 🌉 The role of an Enterprise Architect in bridging the gap between business vision and technical execution. 🛠️ Practical examples of EA implementation. 📊 The significance of platforms in standardizing processes and codifying guidelines, and how they support continuous integration, deployment, and innovation. 🤖 The integration of AI into EA, enhancing capabilities through tools like chatbots, coding assistants, and log analysis systems. 🔄 The continuous nature of EA, emphasizing the need for ongoing adaptation and alignment with changing business strategies and external disruptions. By leveraging robust platform strategies and embracing AI, organizations can position themselves at the forefront of innovation and efficiency, ensuring continuous value delivery in today’s dynamic world. ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00 Intro 00:07 Harnessing the Power of Enterprise Architecture & Artificial Intelligence for Strategic Benefit 00:46 Enterprise Architecture 01:00 What it is not 01:17 Holistic View on the Enterprise. 04:21 Enterprise Architecture as the glue between business and IT architecture 05:27 TOGAFs view on Enterprise Architecture 06:07 HSLU CAS view on Enterprise Architecture 06:30 Conclusion 06:45 The Enterprise Architect 07:18 What it is not 08:55 What is the Enterprise Architect Role? 09:59 Why more than 66% of all Enterprise Architecture initiatives fail 10:39 Enterprise Architecture is a continuous process. 12:49 Impact of Enterprise Architecture on a Company 13:35 How does that look in practice? 18:26 The Digital Factory 19:11 Enterprise Architecture needs the right foundation 21:07 Why are platforms important? 21:50 A platform is a critical enabler for a enterprise 24:17 Example of a platform 25:06 Self-service onboarding 26:20 Self-service financial operation (FinOps) 27:10 Self Service catalog 28:26 Built-in Security 29:07 Where is AI? 29:49 AI Chat bot with company data 30:31 AI Assistant for Documentation 31:12 Analyze Docker Images and get recommendations. 32:08 Analyze Logs and get recommendations. 32:56 Where is AI in Enterprise Architecture? 33:28 Where is AI in TOGAF? 33:44 Where is AI in the Digital Factory? 34:11 AI Capabilities “as a Service” 36:51 Summary 39:15 Closing Words 39:45 Outro ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ HSLU: https://www.hslu.ch/ Digital Veterans Association: https://www.digitalveterans.com/ Platform Plane: https://www.platformplane.com/ Gregor Hohpe https://sg.linkedin.com/in/ghohpe Platform Strategy https://architectelevator.com/book/platformstrategy/ The Software Architect Elevator https://www.amazon.de/Software-Architect-Elevator-Redefining-Architects/dp/1492077542/ ▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬ What is the difference between deployment and release? https://youtu.be/qmItPR0I-OE?si=K7WVDJJial3oN-Ei CrowdStrike Disaster: Causes, Impact, and How to Prevent Future Outages https://youtu.be/a-8zWN3kwck ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Modern Software Engineering https://www.youtube.com/playlist?list=PLrsbMazVPK_rb56rZQr2fyBGR3cyanZpX DevOps https://www.youtube.com/playlist?list=PLrsbMazVPK_ro3fn1G-3Ui2mBPHxOD9kF GitLab: Build a DevSecOps Pipeline https://www.youtube.com/playlist?list=PLrsbMazVPK_qhf3ahA_zRPlwBaGGhSu2P #enterprisearchitecture #artificialintelligence #romanoroth #platformengineering

On July 19, 2024, a CrowdStrike Falcon update caused 8.5 million Windows PCs to crash globally, impacting airlines, government, banks, hospitals, and more. In this video, we explore the incident, its causes, and how to prevent future outages. Key Topics Covered: 📌 Incident Overview: What happened during the update, and the immediate global impact. 📌About CrowdStrike: A brief background on the cybersecurity firm and its flagship product, Falcon. 📌Prevention Strategies: Detailed steps on how to prevent similar incidents We as a tech industry must focus on robust engineering practices to build resilient systems and prevent widespread disruptions. By applying DevOps principles and proactive strategies, companies can significantly reduce the likelihood and impact of software failures. ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00 Intro 00:07 Welcome 00:15 What Happened? 00:37 Who is CrowdStrike? 01:41 What was the Impact? 03:24 Disclaimer 03:41 What can you do to prevent this from happening? 03:57 How to prevent outages by applying DevOps principles. 03:58 Plan your Deployment and Release 04:17 Code Review, Pair Programming, Smart Pointer 06:03 Continuous Intergration, Static Analysis Tools (Cppcheck, ...) 06:49 Test automation, Dynamic anaysis tools (Valgrind, ...) 07:26 Feature toggles, Blue/Green Deployments, Rollback 09:25 Canary Releases, Dark launches, A/B testing 12:11 Proactive detection, Alerting 12:45 Observability 13:07 DevOps Principles 14:21 Summary 15:58 Outro ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ https://twitter.com/A_Luckmann/status/1814354722330918913 https://www.crowdstrike.com/blog/falcon-update-for-windows-hosts-technical-details/ https://downdetector.com/ ▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬ What is the difference between deployment and release? https://youtu.be/qmItPR0I-OE?si=K7WVDJJial3oN-Ei ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Modern Software Engineering https://www.youtube.com/playlist?list=PLrsbMazVPK_rb56rZQr2fyBGR3cyanZpX DevOps https://www.youtube.com/playlist?list=PLrsbMazVPK_ro3fn1G-3Ui2mBPHxOD9kF GitLab: Build a DevSecOps Pipeline https://www.youtube.com/playlist?list=PLrsbMazVPK_qhf3ahA_zRPlwBaGGhSu2P #devsecops #devops #romanoroth #crowdstrike

Welcome to "App-Solutely Safe," where we dive into the cutting edge of banking software development designed to safeguard your digital transformation! 🌐💳 In this video, we explore how modern software development practices are revolutionizing the banking industry. Learn about the essential methodologies that banks are using to enhance security, foster customer trust, and ensure seamless user experiences: 🔹 Continuous Integration and Continuous Deployment (CI/CD): Discover how banks reduce risks and swiftly deploy security patches through automated and incremental updates. 🔹 Test-Driven Development (TDD): See how writing tests before code ensures high-quality, reliable software, detecting flaws early in the development process. 🔹 Feature Flags: Understand how banks use feature toggles to control the rollout of new features, allowing for secure and gradual updates that enhance application security. Join us as we discuss the benefits of these practices, including enhanced security, improved customer satisfaction, and the critical role of leadership in driving this cultural shift. Whether you're a tech enthusiast or a banking professional, this video provides valuable insights into the future of secure digital banking. ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 0:00 - Introduction and Welcome 1:18 - Continuous Deployment in Banking 1:40 - Steps in Continuous Integration and Deployment 2:47 - Benefits of Continuous Deployment 3:26 - Test-Driven Development Overview 3:32 - Process and Benefits of TDD 4:47 - Feature Flags for Controlled Rollouts 5:20 - Security Benefits of Feature Flags 6:08 - Integrating Modern Practices with Legacy Systems 7:52 - Conclusion and Thank You ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ Origial Video: https://youtu.be/sjsRm2pmmus?si=BpxxTCeo-X3PDDDt Flagsmith: https://www.flagsmith.com/ Modern Development Practices in Banking: A Playbook https://www.flagsmith.com/ebook/modern-development-practices-in-banking-a-playbook ▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬ What is the difference between deployment and release? https://youtu.be/qmItPR0I-OE?si=ufTuwyV5nTuteDYp What is Continuous Deployment (CD)? https://youtu.be/97CGyAdWyaw?si=UgUwsE3AKY-iPy03 What is a feature toggle? https://youtu.be/6RWw39ZdBFM?si=xM5t9pqY1mzjSVOL Feature Toggles: What, why, how? https://youtu.be/Q2we6vNFZbY?si=5IS8wBdc5anfmFeE ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Modern Software Engineering https://www.youtube.com/playlist?list=PLrsbMazVPK_rb56rZQr2fyBGR3cyanZpX DevOps https://www.youtube.com/playlist?list=PLrsbMazVPK_ro3fn1G-3Ui2mBPHxOD9kF GitLab: Build a DevSecOps Pipeline https://www.youtube.com/playlist?list=PLrsbMazVPK_qhf3ahA_zRPlwBaGGhSu2P #devsecops #devops #flagsmith #romanoroth

Welcome to another episode of Ship It, hosted by Gerhard Lazu . Dive into a comprehensive discussion on the challenges and victories of implementing DevOps in various sectors, including AI, medical devices, and more. Romano shares his journey from a .NET developer to a DevOps visionary, highlighting the importance of continuous, automated value delivery in business. Discover the intricacies of organizing successful DevOps events, the evolution of DevOps tools from Team City and Jenkins to modern platforms like GitHub and GitLab, and the critical role of security in today's digital landscape. Romano provides valuable insights into hyper-automation, AIOps, and the emerging concept of cyber resilience. This episode is packed with wisdom for those curious about effective DevOps practices, the power of participatory budgeting, and the future trends in the technology space. Whether you're a seasoned professional or new to the field, Romano's experiences and advice are invaluable for anyone looking to enhance their operations and infrastructure. ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00 Introduction 03:42 DevOpsDays Zürich 10:30 Why are you into DevOps? 12:14 Which was your first CI/CD system that you used, do you remember? 14:43 When you don't organize various DevOps related events, what do you do? 16:03 How large is your team? 16:37 Good / Bad Projects? 20:49 Biggest obstacles, the biggest challenges to driving DevOps transformations? 23:02 How to bring the people on board? 23:46 How to deal with people that doesn't want to change? 24:36 Agile and DevOps transformation? 27:32 Can you think of an example when making a mistake was a great thing? 34:03 What role does specific technology play? 35:48 Who decides which technology should be used? 41:24 Why do you think that video is so popular? 42:46 What is AIOps? 44:47 Tools for automating things? 51:01 What is participatory budgeting? 53:46 What is the most important takeaway for our listeners from our conversation, what would you like them to remember? ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ Original Post: https://changelog.com/shipit/28 Gerhard Lazu: https://twitter.com/gerhardlazu Changelog: https://changelog.com/ ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Modern Software Engineering https://www.youtube.com/playlist?list=PLrsbMazVPK_rb56rZQr2fyBGR3cyanZpX DevOps https://www.youtube.com/playlist?list=PLrsbMazVPK_ro3fn1G-3Ui2mBPHxOD9kF GitLab: Build a DevSecOps Pipeline https://www.youtube.com/playlist?list=PLrsbMazVPK_qhf3ahA_zRPlwBaGGhSu2P #devsecops #devops #github #romanoroth

Willkommen zu meinem Vortrag, den ich ursprünglich beim Fi-Forum in Frankfurt am Main am 21. November 2023 präsentiert habe. In diesem Video teile ich meine über zwanzigjährige Erfahrung in der Softwareindustrie und erkläre, wie DevOps und Plattform Engineering die Art und Weise, wie wir Software entwickeln, grundlegend verändern können. Ich tauche tief in die Herausforderungen ein, mit denen die Softwareentwicklung in der Finanzindustrie heute konfrontiert ist – von veralteten Systemen und Prozessen bis hin zu den Schwierigkeiten beim Talentmanagement. Dabei zeige ich, wie eine DevOps-Kultur und -Mindset nicht nur technische Verbesserungen bringen, sondern auch Teams befähigen können, kontinuierlich Wert zu liefern. Ein besonderer Schwerpunkt liegt auf der Skalierung von DevOps durch Plattform Engineering. Ich stelle die Plattform Plane vor, die in Zusammenarbeit mit der Privatbank LGT entwickelt wurde, und zeige, wie sie als Beispiel für die Schaffung einer standardisierten, flexiblen Infrastruktur für DevOps-Praktiken dient. Diese Plattform hilft, die Komplexität zu reduzieren und den kognitiven Aufwand für Entwicklerteams zu minimieren, wodurch eine effizientere und effektivere Softwareentwicklung ermöglicht wird. Ich erkläre auch, wie Plattform Engineering das Fundament für eine "Digitale Fabrik" bildet und kontinuierliche Innovation sowie Effizienz in der Softwareentwicklung ermöglicht. Dies unterstreicht die Bedeutung dieses Ansatzes für die Zukunft der Softwareindustrie und markiert den Beginn einer neuen Ära der Industrialisierung der Softwareentwicklung. ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00 Intro 00:08 Willkommen 00:39 Über mich 02:49 Welchen Herausforderungen sehen sich die Unternehmen der Finanzdienstleistungsbranche (FSI) gegenüber? 03:53 Die Herausforderungen von heute 05:57 DevOps ist hier, um zu helfen 07:38 Was wollen die Führungskräfte in der Finanzdienstleistungsbranche (FSI) erreichen? 08:17 Der Nutzen von DevOps 09:23 Was sind die Herausforderungen, wenn Sie DevOps betreiben? 12:11 Kann man DevOps skalieren? 16:38 Die Digitale Fabrik ermöglicht es Ihnen, großartige Produkte in großem Maßstab zu entwickeln 17:13 Platform Engineering ermöglicht DevOps in Produktteams 19:11 Gartner und internationale Beratungsunternehmen sehen im Plattform-Engineering einen der wichtigsten Technologietrends für die nächsten 1-2 Jahre. 19:39 Die Platform Plane: Das grosse Bild 20:55 Die Platform Plane: High-Level-Architektur 21:39 Beschleunigung des Onboarding durch self-service, BYOD & BYOI 22:16 Developer Experience 22:35 Katalog für Services mocks & Simulatoren und mehr 22:58 Skalierte Built-In Security. 23:13 Tiefgreifende CI/CD-Integration. 23:26 Shit-Left Day 2 Operation 23:49 Zusammenfassung ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ FI-Forum: ➤ https://www.fi-forum.de/ LGT: ➤https://www.lgt.com/ Zühlke: ➤ https://www.zuehlke.com/ ▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬ You're developing products, not projects ➤ https://youtu.be/ImbhUFr6suw?si=UeSOAR67hZcJWE5T DevOps ➤ https://youtu.be/Ath3XoLbYxY?si=xzJzs4Fqpst6uxqm Apply continous testing and build-in quality ➤ https://youtu.be/W0QZRpf7ElM?si=oe54rFG0uEXtHUbJ Apply continous security ➤ https://youtu.be/340YmM08Eb0?si=QFOGkCnUElDXevR- Build a platform ➤ https://youtu.be/UE8mSt55xHw?si=cc6_S_6Wv6iwA_y1 ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Modern Software Engineering https://www.youtube.com/playlist?list=PLrsbMazVPK_rb56rZQr2fyBGR3cyanZpX DevOps https://www.youtube.com/playlist?list=PLrsbMazVPK_ro3fn1G-3Ui2mBPHxOD9kF GitLab: Build a DevSecOps Pipeline https://www.youtube.com/playlist?list=PLrsbMazVPK_qhf3ahA_zRPlwBaGGhSu2P #devsecops #devops #romanoroth #platformengineering

This video captures my presentation delivered at the DevOps Meetup in Zürich on January 25, 2024, where I delve into the prevalent challenges faced by traditional DevOps methodologies, characterized by isolated teams and fragmented value streams that impede efficiency. It explores DevOps as a holistic culture, mindset, and suite of technical practices designed to foster continuous value delivery, prioritize products over projects, and focus on customer-centric development. Additionally, I introduce Platform Engineering as a strategic evolution of DevOps aimed at mitigating the technical and operational complexities encountered when scaling DevOps in larger enterprises. Highlighting a collaborative project with LGT and Zühlke, I present the Platform Plane case study, demonstrating how an internal developer platform can streamline and standardize DevOps processes across various teams, thereby reducing cognitive load and enhancing productivity. This presentation goes beyond theoretical discussion, offering a hands-on demonstration of the Platform Plane and its functionalities, including Kubernetes as a service, API gateway, and Service Mesh, among others. It illustrates the vital role of Platform Engineering in enabling product teams to adopt DevOps more efficiently and effectively, leading to an optimized development lifecycle. ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00 Intro 00:08 Welcome 00:31 About me 02:36 Today's challenges 04:33 DevOps is here to help 05:20 Who is DevOps? 06:44 The Benefit of DevOps 08:05 DevOps is bullshit? 08:27 What are the Challenges with DevOps? 08:59 You build it you run it 10:18 Think about that on scale. 11:06 Can you scale DevOps? 11:23 Example of What companies want 15:50 The Digital Factory 16:35 Platform Engineering Enables DevOps in Product Teams. 18:30 The Gartner Top Strategic Technology Trends for 2024. 19:29 Platform Engineering Improves DevOps Efficiency. 20:24 The Platform Plane: Big Picture. 22:04 The Platform Plane: High Level Architecture 21:56 Demo 1 - The Admin Areas 25:56 Demo 2 - Platform Plane 26:01 Platform Plane- Main page 26:27 Documentations 27:38 AI Assistant 29:21 Platform plane: 30:12 - GitLab 30:44 - Repositories 32:13 - Registry 33:40 - Package Management 36:42 - Hypervisor ( virtual machines) 36:52 - Identity 37:56- Chat 39:07 Summary 39:45 Outro ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ Platform Plane: ➤ https://youtu.be/rSUI6-R4DlM LGT: ➤ https://www.lgt.com/ Zühlke: ➤ https://www.zuehlke.com/ DevOps Meetup Zürich: ➤ https://www.meetup.com/devops-meetup-zurich/ ▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬ You're developing products, not projects ➤ https://youtu.be/ImbhUFr6suw?si=UeSOAR67hZcJWE5T DevOps ➤ https://youtu.be/Ath3XoLbYxY?si=xzJzs4Fqpst6uxqm Apply continous testing and build-in quality ➤ https://youtu.be/W0QZRpf7ElM?si=oe54rFG0uEXtHUbJ Apply continous security ➤ https://youtu.be/340YmM08Eb0?si=QFOGkCnUElDXevR- Build a platform ➤ https://youtu.be/UE8mSt55xHw?si=cc6_S_6Wv6iwA_y1 ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Modern Software Engineering https://www.youtube.com/playlist?list=PLrsbMazVPK_rb56rZQr2fyBGR3cyanZpX DevOps https://www.youtube.com/playlist?list=PLrsbMazVPK_ro3fn1G-3Ui2mBPHxOD9kF GitLab: Build a DevSecOps Pipeline https://www.youtube.com/playlist?list=PLrsbMazVPK_qhf3ahA_zRPlwBaGGhSu2P #devsecops #devops #romanoroth #platformengineering

Welcome to Episode 14 of Tech Chat with Navika Chhauda featuring Romano Roth, where we dive deep into the evolving world of technology and innovation. In this insightful episode, we're exploring the intricate relationship between Platform Engineering and DevOps, two pivotal elements reshaping how businesses deliver software solutions efficiently. 🎙️ Hosted by: Navika Chada, a distinguished Cloud Engineer, Microsoft MVP, and a recognized LinkedIn Top Voice in Cloud Computing. Navika brings her expertise and enthusiasm for cloud technology to the forefront, engaging with leading minds in the tech industry. This episode covers: 📌What is Platform Engineering? - An introduction to platform engineering, its purpose, and how it serves as an enablement tool for product teams. 📌Platform Engineering vs. DevOps - A detailed discussion on how platform engineering complements DevOps practices, enhancing the efficiency and delivery of software solutions. 📌The Importance of Platform Engineering - Understanding why businesses are increasingly adopting platform engineering for streamlined architecture and faster delivery. 📌Capabilities and Tools - Exploring the essential capabilities that an engineering platform should offer and the tools recommended for adopting platform engineering practices. 📌Building a Career in Platform Engineering - Insights into the skills required for a successful career in platform engineering and the role of a platform engineer in the tech ecosystem. ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00 Introduction 01:25 What is Platform Engineering 05:08 Capabilities of Engineering Platform 09:11 Will Platform Engineering replace DevOps 12:36 Areas where Platform Engineering and DevOps overlap 14:55 Platform Engineering Tools 21:25 Skills needed to become a Platform Engineer ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ Original Video: https://youtu.be/2_irsEgWJkM?si=BSNKsXBj7URYi7pA Connect with Navika Chada: LinkedIn: https://www.linkedin.com/in/navikachhauda Twitter: https://twitter.com/nchhauda ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Modern Software Engineering https://www.youtube.com/playlist?list=PLrsbMazVPK_rb56rZQr2fyBGR3cyanZpX DevOps https://www.youtube.com/playlist?list=PLrsbMazVPK_ro3fn1G-3Ui2mBPHxOD9kF GitLab: Build a DevSecOps Pipeline https://www.youtube.com/playlist?list=PLrsbMazVPK_qhf3ahA_zRPlwBaGGhSu2P #devsecops #devops #romanoroth #platformengineering

Dive into the future of software development with our deep dive into Zühlke's Platform Plane, a pioneering solution marking the dawn of industrialization in software development. Discover how this innovative platform serves as the central hub for streamlined development, integrating tools, services, and vendors into a unified workspace. Explore its automated processes, top-tier security features, and user-friendly design that simplifies onboarding and enhances team collaboration. Learn about the unique 'Kubernetes as a Service' feature, transforming complex Kubernetes objects into clear, manageable components, and witness how the platform's customization and scalability cater to your individual business needs. Join us in exploring how Zühlke's Platform Plane is reshaping the industry, delivering efficiency, integration, and a tailored journey in software development. Unlock your team's potential and transform your development process with the insights from this video. ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ Platform Plane on Azure Marketplace: https://azuremarketplace.microsoft.com/en-us/marketplace/apps/zuehlke-engineering.platform_plane?tab=overview Zühlke DevOps Offering: https://www.zuehlke.com/en/expertise/devops Original Video at Zühlke: https://www.youtube.com/watch?v=qo7dc_dDWDg ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Modern Software Engineering https://www.youtube.com/playlist?list=PLrsbMazVPK_rb56rZQr2fyBGR3cyanZpX DevOps https://www.youtube.com/playlist?list=PLrsbMazVPK_ro3fn1G-3Ui2mBPHxOD9kF GitLab: Build a DevSecOps Pipeline https://www.youtube.com/playlist?list=PLrsbMazVPK_qhf3ahA_zRPlwBaGGhSu2P #devsecops #devops #github #kubernetes #gitlab #romanoroth

Revolutionizing Software Delivery: Building Digital Factories with DevOps This presentation explores the evolution from traditional project-based approaches to the dynamic, product-oriented DevOps mindset. Learn about overcoming the challenges of siloed operations and how continuous integration, automated testing, and a customer-centric focus can significantly enhance your business. Discover the pivotal role of DevOps in establishing a culture of continuous improvement and high-performance software delivery. ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00 Intro 00:08 Welcome 00:14 About me 01:52 Today's challenges 03:51 Root cause of challenges? 04:51 It's about products! 04:56 Project vs. Product 06:00 DevOps is here to help 06:31 The people 07:48 DevOps 08:01 Why is this important for you? 09:11 Example 12:17 24 Key Capabilities 16:58 The science behind DevOps 17:36 The benefit of DevOps 18:34 What are the challegs when you do DevOps? 18:41 Modern Sofware Development 19:12 You build it you run it 20:42 Think about that on scale 21:37 Can you scale DevOps? 21:56 What do we want? 26:29 The Digital Factory 27:01 Platform Engineering 28:20 Holistic Approach 29:56 Summary ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ Original Video: https://youtu.be/xeX4HGLeJQw?si=9ps9eY51SxaA0a0L Original Website: https://github.com/MichaelCade/90DaysOfDevOps/blob/main/2024/day02.md ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Modern Software Engineering https://www.youtube.com/playlist?list=PLrsbMazVPK_rb56rZQr2fyBGR3cyanZpX DevOps https://www.youtube.com/playlist?list=PLrsbMazVPK_ro3fn1G-3Ui2mBPHxOD9kF GitLab: Build a DevSecOps Pipeline https://www.youtube.com/playlist?list=PLrsbMazVPK_qhf3ahA_zRPlwBaGGhSu2P #devsecops #devops #digitalfactory #romanoroth

Join Eveline Oehrlich, Chief Research Officer at DevOps Institute, in an enlightening conversation with Romano Roth. In this episode of the Humans of DevOps podcast, they delve into the intricate world of DevOps, shedding light on the common misinterpretations and revealing its true essence as more than just a bridge between development and operations. Discover the challenges organizations face in scaling DevOps, the significance of breaking down silos, and the transformative approach of organizing around value streams. Romano, with his over two decades of experience across various domains, offers a profound perspective on the future of DevOps. He unveils the concept of digital factories, a visionary model for the industrialization of software development, where platform engineering teams set the stage for standardized and efficient product creation. ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00 Introduction 02:43 Chief of DevOps Role 04:11 DevOps Progress and the Wall of Confusion 07:03 Real Implementation of DevOps in Companies 09:00 Model for Multiple DevOps Teams 11:54 Skills for a Platform Engineer 14:00 The Term "DevOps" and Its Effectiveness 17:03 Scaling DevOps Culture in High-Performing Teams 22:59 Future of DevOps 24:49 Hobbies Outside of DevOps ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ DevOps Institute: https://www.devopsinstitute.com Originial Post: https://www.devopsinstitute.com/ep101-devops-is-not-dead/ Eveline Oehrlich: https://www.linkedin.com/in/evelineoehrlich ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Modern Software Engineering https://www.youtube.com/playlist?list=PLrsbMazVPK_rb56rZQr2fyBGR3cyanZpX DevOps https://www.youtube.com/playlist?list=PLrsbMazVPK_ro3fn1G-3Ui2mBPHxOD9kF GitLab: Build a DevSecOps Pipeline https://www.youtube.com/playlist?list=PLrsbMazVPK_qhf3ahA_zRPlwBaGGhSu2P #devsecops #devops #romanoroth

Join me as I unravel the future of DevOps in my latest guide, "DevOps Trends 2024: Unlocking the Future of Product Delivery" In this in-depth video, I analyse the crucial role of DevOps in modern business success, especially among the widespread integration of AI technologies. Structured around the Technology Adoption Lifecycle, I categorize and thoroughly analyze the DevOps trends across various segments of adoption: Innovators, Early Adopters, Early Majority, Late Majority, and Laggards. Each segment provides insightful revelations about the technologies and methodologies that are shaping the future of modern software development and operations. I also offer my predictions for 2025, giving you a forward-looking perspective on the potential evolution of these trends. I'm eager to hear your voice in this evolving discussion! Share your insights, challenge my predictions, or drop your visionary thoughts in the comments section below. Let's ignite a vibrant discussion and shape the future of DevOps together! ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00 Welcome 00:19 Introduction 00:31 AI AI AI AI Everywhere 01:29 Resources 01:47 Technology Adoption Lifecycle 03:11 - Innovators 03:31 - Early Adapters 03:56 - Early Majority 04:21 - Late Majority 04:42 - Laggards 05:42 Segment 5: Laggards 05:55 - Agile & Version Control 06:08 Segment 4: Late Majority 06:16 - DevOps 06:55 - Continuous Integration (CI) 07:26 - Container 07:58 - Monitoring 08:32 - Test Automation 09:05 - Deployment Automation 09:46 - Summary Segment 4 Late Majority 10:04 Segment 3: Early Majority 10:11 - DORA Metrics 11:17 - Internal Developer Portal (IDP) 11:54 - Platform Engineering 13:12 - Test Data Management 14:24 - Continous Delivery (CD) 15:15 - Container Orchestration 16:04 - Infrastructure as Code (IaC) 16:46 - Observability 17:21 - DevSecOps 18:14 - Site Reliability Engineering (SRE) 18:53 - GitOps 19:38 - FinOps 20:46 - Summary Segment 3 Early Majority 21:18 Segment 2: Early Adapters 21:23 - AI Augmented Development 22:24 - Industry Cloud Platforms 23:11 - AIOps 24:22 - ChatOps 25:02 - DataOps 25:42 - MLOps 26:22 - Developer Experience (DevEx) 27:17 - eBPF 28:17 - Policy as Code 29:18 - Service Mesh 30:03 - Documentation as Code 30:45 - Continuous Testing 31:58 - Cloud Development Environments 33:04 - Chaos Engineering 33:41- Summary Segment 2 Early Adapters 34:19 Chasm (Technology Adoption Lifecycle) 34:57 Segment 1: Innovators 35:02 - DesignOps 35:29 - Observability Driven Development (ODD) 36:08 - Data Mesh 36:55 - NoOps 37:56 - Summary Segment 1 Innovators 38:16 The DevOps Trends 2024 38:38 My prediction of the top DevOps Trends for 2024 39:06 The DevOps Trends 2025: Early Majority 39:36 The DevOps Trends 2025: Early Adopters 40:00 Summary 40:49 Finish 41:11 Outro ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬ The Future of DevOps: Top Trends to Watch in 2023 https://youtu.be/BQ5C0xLCaWY What are the top DevOps trends in 2022? https://youtu.be/Dn9sQ9GpmOc What are the top DevOps trends in 2021? https://youtu.be/9jPmGqWOlWQ DevOps Transformations: My lessons learned https://youtu.be/6FlW9alePeY The Digital Factory https://youtu.be/UE8mSt55xHw?si=lKkGrBCEos98LJOJ The Zühlke DevOps Offering https://youtu.be/fUQFCM41KT8 ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Modern Software Engineering https://www.youtube.com/playlist?list=PLrsbMazVPK_rb56rZQr2fyBGR3cyanZpX DevOps https://www.youtube.com/playlist?list=PLrsbMazVPK_ro3fn1G-3Ui2mBPHxOD9kF GitLab: Build a DevSecOps Pipeline https://www.youtube.com/playlist?list=PLrsbMazVPK_qhf3ahA_zRPlwBaGGhSu2P #devops #platformengineering #trends #romanoroth

This episode provides a deep dive into what DevOps truly entails, moving beyond tools to emphasize its role as a mindset, culture, and a collection of technical practices aimed at continuous value delivery. Kerry and Romano discusses the transformation from small, multifunctional teams in the early 2000s to the current challenges posed by specialized team silos, and how overcoming these barriers is crucial for maintaining a continuous flow of value. Listeners will also gain an understanding of how DevOps is implemented, starting from the ideation stage to development, and its significance in consulting, especially in facilitating Agile and DevOps transformations. Furthermore, Romano offers a glimpse into the future of DevOps, highlighting trends like the industrialization of software development and the potential impact of AI. ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00 Intro 00:55 From .NET Developer to DevOps: A Professional Journey 01:51 Unraveling the Vagueness: What Does DevOps Really Mean? 02:35 Exploring the DevOps Mindset: More Than Just Practices 04:06 DevOps in Consulting: Focusing on the End User 04:23 The Evolution of DevOps: A Historical Perspective 06:09 The Extent of DevOps: From Requirements to User Stories 09:01 Measuring Success in DevOps: Approaches and Methodologies 10:03 Azure DevOps: A Transformation in Technology and Terminology 11:59 The Role of Tools in Effective DevOps Implementation 13:08 CI/CD Systems: The Heart of DevOps? 17:31 The Challenge of Cultivating a DevOps Mindset in Consulting 18:01 Introducing DevOps to Traditional Companies: A Learning Curve 20:01 The Future Trajectory of DevOps: Evolution or Revolution? 25:08 The Impact of AI and Machine Learning on DevOps Practices 28:07 Embracing the Rapid Pace: AI's Role in the Future of DevOps ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ Original Post: https://kerry.lothrop.de/devtalk-88-romano-roth/ ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Modern Software Engineering https://www.youtube.com/playlist?list=PLrsbMazVPK_rb56rZQr2fyBGR3cyanZpX DevOps https://www.youtube.com/playlist?list=PLrsbMazVPK_ro3fn1G-3Ui2mBPHxOD9kF GitLab: Build a DevSecOps Pipeline https://www.youtube.com/playlist?list=PLrsbMazVPK_qhf3ahA_zRPlwBaGGhSu2P #devsecops #devops #romanoroth

In today’s world, everybody wants to do DevSecOps. But why? What problems are we trying to solve? Together we will take a step back and look at how you can architect for continuous delivery. We explore the transformative journey in software development and DevSecOps. Together, we dive into the pivotal shift from traditional project-focused methods to a product-oriented approach in software engineering. We discuss the integral role of DevSecOps in enhancing team collaboration and outline essential strategies for effective continuous delivery. Key topics we cover include the significance of automated testing, the integration of security in the development cycle, ensuring operability, and the impact of platform engineering on reducing team workload. ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00 Intro 01:44 Preamble 01:51 About Romano Roth 03:41 Today's Challenges 05:55 Where do these challenges come from? 06:48 It's about products! 06:56 Diffrence between Projects and Products 08:07 DevOps is here to help 08:36 Who is DevOps 09:48 DevOps 10:01 Why is this important for you? 10:45 Example? 13:14 The 24 key capabilities that drive improvements in software delivery performance 17:21 The science behind DevOps 18:09 The benefits of the DevOps 19:00 Modern product development 21:32 Built-in quality 21:44 Invest in automated testing 22:38 Test fast for continuous feedback 24:57 The right balance of tests 26:16 Continuous testing 27:51 Built-in security 28:17 The continuous delivery pipeline 28:57 What the platform vendors promise... 29:12 DevSecOps pipeline 30:40 DevSecOps with GitLab and GitHub 30:59 Continuous security 32:09 Built for operability 32:16 You build it you run it 33:34 Evolution of monitoring 35:46 We need to architect for operability 37:20 Build a platform 37:42 Modern Software Development 38:18 You need to take care about the full stack 39:35 Think about that on scale... 40:41 Platform engineering enables devops in product teams 42:57 Platform engineering scales the platform to multiple product teams 43:40 Gartner sees platform engineering as a key technology 44:11 Summary 45:54 we are entering the age of industrialization of software development ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ Conf42 ➤ https://www.conf42.com/ Original Video ➤ https://youtu.be/WW2srirtw3M?si=T8TPvqerPrzsj-6s Read the abstract ➤ https://www.conf42.com/DevSecOps_2023_Romano_Roth_architect_continuous_delivery Other sessions at this event ➤ https://www.conf42.com/devsecops2023 Join Discord ➤ https://discord.com/invite/DnyHgrC7jC ▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬ You're developing products, not projects ➤ https://youtu.be/ImbhUFr6suw?si=UeSOAR67hZcJWE5T DevOps ➤ https://youtu.be/Ath3XoLbYxY?si=xzJzs4Fqpst6uxqm Apply continous testing and build-in quality ➤ https://youtu.be/W0QZRpf7ElM?si=oe54rFG0uEXtHUbJ Apply continous security ➤ https://youtu.be/340YmM08Eb0?si=QFOGkCnUElDXevR- Build a platform ➤ https://youtu.be/UE8mSt55xHw?si=cc6_S_6Wv6iwA_y1 ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Modern Software Engineering https://www.youtube.com/playlist?list=PLrsbMazVPK_rb56rZQr2fyBGR3cyanZpX DevOps https://www.youtube.com/playlist?list=PLrsbMazVPK_ro3fn1G-3Ui2mBPHxOD9kF GitLab: Build a DevSecOps Pipeline https://www.youtube.com/playlist?list=PLrsbMazVPK_qhf3ahA_zRPlwBaGGhSu2P #devsecops #devops #platformengineering #romanoroth

Unveiling the Power of DevOps Welcome to my latest video where I unravel the science behind DevOps and explore the transformative DORA Metrics. Discover the insights from the groundbreaking book "Accelerate," authored by Dr. Nicole Forsgren, Jez Humble, and Gene Kim. This essential book, published in 2018, delves into the 24 key capabilities that drive improvements in software delivery performance. From Continuous Delivery to Cultural Capabilities, we break down the crucial aspects that elevate your DevOps game. Learn how DORA Metrics - Lead Time for Changes, Deployment Frequency, Time to Restore Service, and Change Failure Rate - scientifically measure software delivery performance. Gain insights from the State of DevOps reports, comparing elite performers to low performers, and see how metrics translate into real-world benefits like faster time to market, enhanced quality, and top-tier employee satisfaction. Witness the evolution of DevOps from 2018 to the present, as more companies embrace elite-level practices. Access all State of DevOps reports and a self-assessment tool for your organization's software delivery performance. ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00 Welcome 00:28 Intro 00:34 The Book 01:09 The Authors 02:34 The Table of Contents 04:05 The Research 05:39 The 24 Key Capabilities 10:20 The science behind DevOps 11:01 How to measure the software delivery performance? 11:34 The DORA Metrics 18:04 Result of State of DevOps Report 2019 18:59 Result of State of DevOps Report 2021 19:10 DevOps Benefits 19:48 The industry accelerates 20:31 State of DevOps reports 20:48 Finish 21:03 Outro ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬ DevOps Transformations: My lessons learned https://youtu.be/6FlW9alePeY The Digital Factory https://youtu.be/UE8mSt55xHw?si=lKkGrBCEos98LJOJ The Zühlke DevOps Offering https://youtu.be/fUQFCM41KT8 ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Modern Software Engineering https://www.youtube.com/playlist?list=PLrsbMazVPK_rb56rZQr2fyBGR3cyanZpX DevOps https://www.youtube.com/playlist?list=PLrsbMazVPK_ro3fn1G-3Ui2mBPHxOD9kF GitLab: Build a DevSecOps Pipeline https://www.youtube.com/playlist?list=PLrsbMazVPK_qhf3ahA_zRPlwBaGGhSu2P #devops #devsecops #transformation #romanoroth

DevOps Transformations: My lessons learned In this video, I share my personal insights and experiences on navigating the intricate world of DevOps transformation. Join me as I discuss key lessons learned, challenges faced, and effective strategies that have proven crucial in my own journey. From instilling a sense of urgency at the C-level to overcoming middle management resistance, I unravel the complexities and provide actionable recommendations. We'll explore the nuances of aligning IT and business goals, fostering a culture of learning, and engaging external experts. Whether you're a seasoned DevOps enthusiast or just starting your journey, this video offers my perspective on building a digital factory for success. Join me as we dive into the transformative landscape of DevOps together! ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00 Welcome 00:16 Intro 00:22 Doing DevOps is simple, you just need.. 03:06 What do we want to achieve 04:17 What are the the challenges 05:41 My lesson learned 06:04 The Sense of urgency 09:38 Leadership Commitment 13:37 One-Size-Fits-all 17:46 Form a DevOps Team 19:50 Busyness 23:41 Go Full DevOps 29:04 What do we want 34:07 The Digital Factory 35:29 Platform Engineering 37:17 Holistic Approach 39:20 Success Criteria 42:29 Age of industrialization of Software Development 43:04 Outro ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com ▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬ The Digital Factory https://youtu.be/UE8mSt55xHw?si=lKkGrBCEos98LJOJ The science behind DevOps https://youtu.be/O1UWJ90glIA?si=oC6gmgxyX9Fi20rW How to architect for continuous delivery https://youtu.be/l41gZeeq8uA?si=Jejcg-y7jJl5jGiX ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Modern Software Engineering https://www.youtube.com/playlist?list=PLrsbMazVPK_rb56rZQr2fyBGR3cyanZpX DevOps https://www.youtube.com/playlist?list=PLrsbMazVPK_ro3fn1G-3Ui2mBPHxOD9kF GitLab: Build a DevSecOps Pipeline https://www.youtube.com/playlist?list=PLrsbMazVPK_qhf3ahA_zRPlwBaGGhSu2P #devops #devsecops #transformation #romanoroth #digitalfactory

Unlocking Digital Excellence with Zühlke's DevOps Mastery. Discover the power of Zühlke's cutting-edge DevOps solutions. Break free from traditional silos, explore the transformative impact of DevOps at scale, and witness the creation of Digital Factories for rapid, customer-centric value delivery. Take a deep dive into the Platform Plane—an all-encompassing solution for efficient, secure, and scalable software development. Elevate your approach with Zühlke's DevOps Mastery. ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00 Welcome 00:17 Intro 00:23 Agenda 00:42 About Me 02:43 About Zühlke 03:12 Zühlke Capabilities 04:31 Today’s Challenges 06:52 DevOps is here to help 07:16 Who is DevOps 08:31 DevOps 08:43 Benefit of DevOps 09:40 Challenges when Scaling DevOps 09:58 What does DevOps look like at scale: Anti Pattern A 10:16 What does DevOps look like at scale: Anti Pattern B 10:55 What does DevOps look like at scale 11:46 The continuous delivery pipeline 13:38 What the platform vendors promise 13:58 What CDP with a vendor looks like 14:28 Modern Software Development with DevOps 15:20 The cognitive load is too high 17:12 Can you scale DevOps 17:17 What do we want 23:27 Digital Factory 24:14 Platform Engineering scales DevOps 24:46 Platform Engineering enables DevOps 26:39 This is how you scale DevOps 26:51 Zühlke DevOps Offering 29:15 Zühlke DevOps Assets 30:03 Zühlke DevOps Capabilities 30:54 DevOps Offering: The Digital Factory 34:25 DevOps Offering: The Platform Plane 39:37 We are entering the age of industrialization of Software Development 40:36 Outro ▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬ Zühlke DevOps Careers https://www.zuehlke.com/en/careers/devops Zühlke DevOps Offering https://www.zuehlke.com/en/expertise/devops Zühlke Digital Factory https://www.zuehlke.com/en/expertise/devops/digital-factory DevOps Transformations: My lessons learned https://youtu.be/6FlW9alePeY The Digital Factory https://youtu.be/UE8mSt55xHw?si=lKkGrBCEos98LJOJ The science behind DevOps https://youtu.be/O1UWJ90glIA?si=oC6gmgxyX9Fi20rW ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Modern Software Engineering https://www.youtube.com/playlist?list=PLrsbMazVPK_rb56rZQr2fyBGR3cyanZpX DevOps https://www.youtube.com/playlist?list=PLrsbMazVPK_ro3fn1G-3Ui2mBPHxOD9kF GitLab: Build a DevSecOps Pipeline https://www.youtube.com/playlist?list=PLrsbMazVPK_qhf3ahA_zRPlwBaGGhSu2P #devops #devsecops #transformation #romanoroth #digitalfactory

We are entering the age of the industrialization of software development. The Digital Factory together with Platform Engineering will help industrialize digital product development across teams to efficiently develop products and improve the lives of our staff, time to market, quality, and alignment ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 0:00 Intro 0:25 Preamble 0:37 About Romano 2:40 What are today's challenges? 4:54 What is DevOps? 5:27 Who is DevOps? 6:50 The benefits of the DevOps 7:56 But how do you scale DevOps? 8:12 What does DevOps look like?... 9:03 ...at scale? 9:53 The continuous delivery pipeline 11:00 What the platform vendors promise... 11:22 What the continuous delivery pipeline with a platform looks like 11:54 Modern software development is a continuous processs across the value stream 12:44 The cognitive load is too high 14:19 Can you scale DevOps? 19:47 Digital factory requires a foundation 20:51 Platform engineering enables DevOps in product teams 22:11 Delivering complex products requires a holistic approach 24:07 We are entering the age of industrialization of software development ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ Conf42: https://www.conf42.com/ Original Video: https://youtu.be/czBslOClK1E?si=wVv6IlQxwpHqjIbV Read the abstract: https://www.conf42.com/Platform_Engineering_2023_Romano_Roth_the_digital_factory Other sessions at this event: https://www.conf42.com/platform2023 Join Discord: https://discord.gg/DnyHgrC7jC ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Modern Software Engineering https://www.youtube.com/playlist?list=PLrsbMazVPK_rb56rZQr2fyBGR3cyanZpX DevOps https://www.youtube.com/playlist?list=PLrsbMazVPK_ro3fn1G-3Ui2mBPHxOD9kF GitLab: Build a DevSecOps Pipeline https://www.youtube.com/playlist?list=PLrsbMazVPK_qhf3ahA_zRPlwBaGGhSu2P #devsecops #devops #github #romanoroth

Peter Nijenhuis and I are thrilled to share our latest podcast episode: "𝐇𝐨𝐰 𝐓𝐨 𝐃𝐞𝐚𝐥 𝐖𝐢𝐭𝐡 𝐑𝐞𝐬𝐢𝐬𝐭𝐚𝐧𝐜𝐞?" 🙅 Navigating through 𝐀𝐠𝐢𝐥𝐞 and 𝐃𝐞𝐯𝐎𝐩𝐬 𝐭𝐫𝐚𝐧𝐬𝐟𝐨𝐫𝐦𝐚𝐭𝐢𝐨𝐧𝐬 isn't just about tools and processes; it's about people and their reactions to change. We dive deep into our personal experiences, challenges faced, and strategies we've employed to overcome resistance. Whether you're leading a transformation or just curious about the human side of tech change, this episode is for you! 🔍 Key Questions: 📌Do you need to address resistance differently when it comes to resistance from a manager and resistance from a team member? 📌 Do you need to adjust your communication style and choose wording carefully when you want to address this resistance? 📌 What kind of skillset is required when you want to deal with resistance? 📌 What could be the cause of the resistance that the person is showing? If you've ever faced pushback or resistance in your projects or initiatives, this one's for you. Give it a listen, and let's start a conversation! Drop your thoughts, experiences, or questions below. ⬇️ ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00 Intro 00:05 Welcome 00:15 Romano Roth 01.07 Peter Nijenhuis 02.02 How to deal with resistance 02:20 Do you need to address resistance differently when it comes to resistance from a manager and resistance from a team member? 07:22 Do you need to adjust your communication style and choose wording carefully when you want to address this resistance? 14:33 What kind of skillset is required when you want to deal with resistance? 22:05 What could be the cause of the resistance that the person is showing? 28:03 Summary 28:38 Win a price 29:46 End ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ Peter Nijenhuis https://www.linkedin.com/in/peter-nijenhuis-%E2%9C%93-lion-0b83751/ ▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬ How to survive Game of Thrones in the workplace: A guide for conflict management https://youtu.be/8f8liIwVakc?si=x6R5ai05fkfZ1D3Z ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Modern Software Engineering https://www.youtube.com/playlist?list=PLrsbMazVPK_rb56rZQr2fyBGR3cyanZpX DevOps https://www.youtube.com/playlist?list=PLrsbMazVPK_ro3fn1G-3Ui2mBPHxOD9kF GitLab: Build a DevSecOps Pipeline https://www.youtube.com/playlist?list=PLrsbMazVPK_qhf3ahA_zRPlwBaGGhSu2P #devsecops #devops #romanoroth

Recording of the Talk "How to architect for continuous delivery" at The DEVOPS Conference - Global 2023 Let's explore the importance of continuous delivery and how you can architect your system for it. By taking a step back and looking at the bigger picture, we can design a system that enables us to deliver code changes frequently and reliably. In this talk, Romano Roth covers the key principles of continuous delivery, the benefits it brings, and how to architect your system for it. ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00 Intro 00:04 How to architect for continous delivery? 00:12 About myself 02:20 Today's challenges 04:45 Where do these challenges come from? 05:35 Project vs Product 06:51 What is DevOps? 07:29 Who is DevOps? 08:36 DevOps 08:51 The sience behind DevOps 09:57 How to measure the software delivery performance? 10:34 The DORA Metrics 12:38 DevOps benefits 2019 13:50 DevOps benefits 2021 14:09 Summary of benefits of DevOps 14:32 What are the challenges when you scale DevOps? 14:44 What does DevOps look at scale? 15:02 DevOps Silo 15:33 How DevOps looks at scale 16:45 The continous deleivery pipeline 17:42 What the platform vendors promise 17:56 What a Continuous Delivery Pipelien with a platform looks like 18:31 Modern Software Development 19:14 The cognitive load is too high 21:04 How to scale Devops and architect for continous delivery? 21:13 The digital factory 21:50 Platform Engineering Scales the Platform 22:48 Platform Engineering Enables DevOps in Product Teams 23:54 Platform Engineering Enables DevOps 24:20 We are entering the age of industralization of Software Development 25:30 Questions 38:38 End ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ Original Video: https://youtu.be/y-R5NfrbfWo The DevOps Conference: https://www.thedevopsconference.com/ ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Modern Software Engineering https://www.youtube.com/playlist?list=PLrsbMazVPK_rb56rZQr2fyBGR3cyanZpX DevOps https://www.youtube.com/playlist?list=PLrsbMazVPK_ro3fn1G-3Ui2mBPHxOD9kF GitLab: Build a DevSecOps Pipeline https://www.youtube.com/playlist?list=PLrsbMazVPK_qhf3ahA_zRPlwBaGGhSu2P #devsecops #devops #romanoroth

Which Is Better? GitHub or GitLab? You'll Be Shocked by the Answer! During the last months, Paddi and I have analysed intensively GitHub and GitHub. We have produced a dedicated video series with 12 videos for each platform. A total of 24 videos! In this video, we present a comprehensive overview of our findings and offer our expert recommendations. ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00 Welcome 00:25 Intro 00:30 Overview 02:00 Background 04:01 Feature Comparison 04:09 Number of users 04:18 Deployment options 04:26 Price 05:09 Open/Close Source 05:18 SLA 05:32 Personal Use 06:10 Enterprise Use 07:26 Ease to learn 08:07 Documentation 09:09 On Platform Code edit 09:28 Power of pipeline 12:28 Out-of-box Security tools 13:30 Vulnerability Management 16:53 Secret Management 18:18 Supply Chain Risk 19:15 Custom Tool Integration 20:11 Merge/Pull Request support 25:30 GitLab: Our wishes for improvement. 29:58 GitHub: Our wishes for improvement. 35:39 Summary GitLab and GitHub 39:26 Final thoughts GitLab vs GitHub 40:51 Outro ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ Source Code GitHub https://github.com/romanoroth/GitHubDevSecOps Source Code GitLab https://gitlab.com/romano_roth/gitlabdevsecopspipeline Blog-Post https://www.romanoroth.com/post/gitlab-vs-github-devsecops GitHub https://github.com/ Patrick Steger https://www.linkedin.com/in/patrick-steger-ch/ ▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬ GitHub GitHub: DevSecOps: Part 1/12: What is GitHub? The fundamental concepts of a DevSecOps pipeline. https://youtu.be/_m5KYEi1ThA GitHub: DevSecOps: Part 2/12: Introduction to GitHub https://youtu.be/6ZdxXDu8ZDA GitHub: DevSecOps: Part 3/12: Learn How to Use SCA (Software Composition Analysis) https://youtu.be/xM3elerxjYo GitHub: DevSecOps: Part 4/12: How to ensure License Compliance? https://youtu.be/l7IBh2xkDcQ GitHub: DevSecOps: Part 5/12: Protect your Apps with Static Application Security Testing (SAST) https://youtu.be/p4xS2X5KsNk GitHub: DevSecOps: Part 6/12: How to use Container Scanning https://youtu.be/_ZeKh3GcbgU GitHub: DevSecOps: Part 7/12: How to find secrets in your own code with Secret Scanning https://youtu.be/k-uuPTLNXGM GitHub: DevSecOps: Part 8/12: How to use Dynamic Application Security Testing (DAST) https://youtu.be/v_xo1kgNYsE GitHub: DevSecOps: Part 9/12: Vulnerability Management https://youtu.be/p4ldky64jxE GitHub: DevSecOps: Part 10/12: Branch Protection and Pull Requests https://youtu.be/xsLCR7b4u9k GitHub: DevSecOps: Part 11/12: How to do Schedule pipeline in GitHub https://youtu.be/Yy3KAloE5e0 GitHub: DevSecOps: Part 12/12: How to build a DevSecOps pipeline with GitHub: Our Recommendations https://youtu.be/zCxZhVTUpNE GitLab Session 1: What is GitLab 🦊? | The fundamental concepts https://youtu.be/sHK8uN5fBhs Session 2: Introduction to GitLab 🦊 | Creating a simple project https://youtu.be/GQ3x9bkCK90 Session 3: What is Software Composition Analysis (SCA) 🧩 in GitLab? https://youtu.be/l69W5Ym_M5o Session 4: How to ensure License Compliance 📜 in GitLab? https://youtu.be/Kmbj_PCiHyk Session 5: How to do Static Application Security Testing (SAST) 🛡️ in GitLab? https://youtu.be/owwIMUamdDc Session 6: How to do Container Scanning 📦 in GitLab? https://youtu.be/1AUKQ32K6D4 Session 7: What is Secret Detection 🤫? https://youtu.be/Qs28ONnj00s Session 8: Dynamic Application Security Testing (DAST) https://youtu.be/Jy1OiuPZrKs Session 9: What is Vulnerability Management 📝? https://youtu.be/XSrlVyv0H1c Session 10: How to do a Merge Request in GitLab https://youtu.be/h4AN7S2gwug Session 11: How to do a Schedule Pipeline in GitLab? https://youtu.be/PqPW3zQeP94 Session 12: Our Recommendations https://youtu.be/dphgw9xxjuw ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Modern Software Engineering https://www.youtube.com/playlist?list=PLrsbMazVPK_rb56rZQr2fyBGR3cyanZpX DevOps https://www.youtube.com/playlist?list=PLrsbMazVPK_ro3fn1G-3Ui2mBPHxOD9kF GitLab: Build a DevSecOps Pipeline https://www.youtube.com/playlist?list=PLrsbMazVPK_qhf3ahA_zRPlwBaGGhSu2P #devsecops #devops #github #romanoroth

How to build a DevSecOps pipeline with GitHub: Our Recommendations Session 12: In this video, Padi and I will present you our recommendations for setting up a DevSecOps Pipeline with GitHub. ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00 Welcome 00:15 Intro 00:21 Recommendations an summary 00:34 DevSecOps with GitHub 01:40 Our Recommendations 01:50 Create top level workflows and re-use workflows 02:41 Define on what branches to run pipelines. 02:56 Use scheduled pipelines 03:51 Use Pull Request 04:14 Protect your branch 05:06 Review the tools you source from the marketplace 05:52 Store your secrets in a secret management 06:36 Evaluate the Security tool 07:01 DAST: Customise the scanner configuration 07:26 Considering including a Secure Expert 07:32 Use a external Vulnarability Management 09:00 Summary 09:43 Outro ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ Source Code https://github.com/romanoroth/GitHubDevSecOps Blog-Post https://www.romanoroth.com/post/gitlab-vs-github-devsecops GitHub https://github.com/ Patrick Steger https://www.linkedin.com/in/patrick-steger-ch/ ▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬ GitHub: DevSecOps: Part 1/12: What is GitHub? The fundamental concepts of a DevSecOps pipeline. https://youtu.be/_m5KYEi1ThA GitHub: DevSecOps: Part 2/12: Introduction to GitHub https://youtu.be/6ZdxXDu8ZDA GitHub: DevSecOps: Part 3/12: Learn How to Use SCA (Software Composition Analysis) https://youtu.be/xM3elerxjYo GitHub: DevSecOps: Part 4/12: How to ensure License Compliance? https://youtu.be/l7IBh2xkDcQ GitHub: DevSecOps: Part 5/12: Protect your Apps with Static Application Security Testing (SAST) https://youtu.be/p4xS2X5KsNk GitHub: DevSecOps: Part 6/12: How to use Container Scanning https://youtu.be/_ZeKh3GcbgU GitHub: DevSecOps: Part 7/12: How to find secrets in your own code with Secret Scanning https://youtu.be/k-uuPTLNXGM GitHub: DevSecOps: Part 8/12: How to use Dynamic Application Security Testing (DAST) https://youtu.be/v_xo1kgNYsE GitHub: DevSecOps: Part 9/12: Vulnerability Management https://youtu.be/p4ldky64jxE GitHub: DevSecOps: Part 10/12: Branch Protection and Pull Requests https://youtu.be/xsLCR7b4u9k GitHub: DevSecOps: Part 11/12: How to do Schedule pipeline in GitHub https://youtu.be/Yy3KAloE5e0 ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Modern Software Engineering https://www.youtube.com/playlist?list=PLrsbMazVPK_rb56rZQr2fyBGR3cyanZpX DevOps https://www.youtube.com/playlist?list=PLrsbMazVPK_ro3fn1G-3Ui2mBPHxOD9kF GitLab: Build a DevSecOps Pipeline https://www.youtube.com/playlist?list=PLrsbMazVPK_qhf3ahA_zRPlwBaGGhSu2P #devsecops #devops #github #romanoroth

How to do a Schedule Pipeline in GitLab 📅? Session 11: In this video, Padi and I will show you how to configure a Schedule Pipeline for our DevSecOps pipeline in GitHub so that the pipeline run at regular intervals. ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00 Welcome 00:53 Intro 00:59 Scheduled Pipeline 01:07 DevSecOps with GitHub 01:49 Why do we need Schedule Pipeline? 03:20 Schedule Pipeline for Production 04:01 Schedule Pipeline Configuration 05:20 Demo 07:57 Scheduled Pipeline run 08:31 Summary 09:21 Outro ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ Source Code https://github.com/romanoroth/GitHubDevSecOps Blog-Post https://www.romanoroth.com/post/gitlab-vs-github-devsecops GitHub https://github.com/ Patrick Steger https://www.linkedin.com/in/patrick-steger-ch/ ▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬ GitHub: DevSecOps: Part 1/12: What is GitHub? The fundamental concepts of a DevSecOps pipeline. https://youtu.be/_m5KYEi1ThA GitHub: DevSecOps: Part 2/12: Introduction to GitHub https://youtu.be/6ZdxXDu8ZDA GitHub: DevSecOps: Part 3/12: Learn How to Use SCA (Software Composition Analysis) https://youtu.be/xM3elerxjYo GitHub: DevSecOps: Part 4/12: How to ensure License Compliance? https://youtu.be/l7IBh2xkDcQ GitHub: DevSecOps: Part 5/12: Protect your Apps with Static Application Security Testing (SAST) https://youtu.be/p4xS2X5KsNk GitHub: DevSecOps: Part 6/12: How to use Container Scanning https://youtu.be/_ZeKh3GcbgU GitHub: DevSecOps: Part 7/12: How to find secrets in your own code with Secret Scanning https://youtu.be/k-uuPTLNXGM GitHub: DevSecOps: Part 8/12: How to use Dynamic Application Security Testing (DAST) https://youtu.be/v_xo1kgNYsE GitHub: DevSecOps: Part 9/12: Vulnerability Management https://youtu.be/p4ldky64jxE GitHub: DevSecOps: Part 10/12: Branch Protection and Pull Requests https://youtu.be/Xf22eBxxgZ0 ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Modern Software Engineering https://www.youtube.com/playlist?list=PLrsbMazVPK_rb56rZQr2fyBGR3cyanZpX DevOps https://www.youtube.com/playlist?list=PLrsbMazVPK_ro3fn1G-3Ui2mBPHxOD9kF GitLab: Build a DevSecOps Pipeline https://www.youtube.com/playlist?list=PLrsbMazVPK_qhf3ahA_zRPlwBaGGhSu2P #devsecops #devops #github #romanoroth

What is Branch Protection and Pull Requests? Session 10: In this video, Padi and I will show you how to do a Pull Request (PR) to check the source code changes into a branch by using a DevSecOps pipeline build with GitHub. Pull requests are a huge part of a team's development process. It's the main gatekeeper preventing developers from throwing whatever they want into the default branch. ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00 Welcome 00:18 Intro 00:24 Branch Protection 00:33 DevSecOps with GitHub 02:02 What is a Branch? (Overview) 05:32 What is Branch Protection? 06:22 How to enable Branch Protection? 06:48 Best Practices - Pull Request 08:11 Demo: Reducing Security findings 10:53 Creating Pull Request 13:45 Configuring Branch Protection Rules 20:11 Pull Request with Branch Protection 24:17 Summary 24:53 Outro ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ Source Code https://github.com/romanoroth/GitHubDevSecOps Blog-Post https://www.romanoroth.com/post/gitlab-vs-github-devsecops GitHub https://github.com/ Patrick Steger https://www.linkedin.com/in/patrick-steger-ch/ ▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬ GitHub: DevSecOps: Part 1/12: What is GitHub? The fundamental concepts of a DevSecOps pipeline. https://youtu.be/_m5KYEi1ThA GitHub: DevSecOps: Part 2/12: Introduction to GitHub https://youtu.be/6ZdxXDu8ZDA GitHub: DevSecOps: Part 3/12: Learn How to Use SCA (Software Composition Analysis) https://youtu.be/xM3elerxjYo GitHub: DevSecOps: Part 4/12: How to ensure License Compliance? https://youtu.be/l7IBh2xkDcQ GitHub: DevSecOps: Part 5/12: Protect your Apps with Static Application Security Testing (SAST) https://youtu.be/p4xS2X5KsNk GitHub: DevSecOps: Part 6/12: How to use Container Scanning https://youtu.be/_ZeKh3GcbgU GitHub: DevSecOps: Part 7/12: How to find secrets in your own code with Secret Scanning https://youtu.be/k-uuPTLNXGM GitHub: DevSecOps: Part 8/12: How to use Dynamic Application Security Testing (DAST) https://youtu.be/v_xo1kgNYsE GitHub: DevSecOps: Part 9/12: Vulnerability Management https://youtu.be/p4ldky64jxE ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Modern Software Engineering https://www.youtube.com/playlist?list=PLrsbMazVPK_rb56rZQr2fyBGR3cyanZpX DevOps https://www.youtube.com/playlist?list=PLrsbMazVPK_ro3fn1G-3Ui2mBPHxOD9kF GitLab: Build a DevSecOps Pipeline https://www.youtube.com/playlist?list=PLrsbMazVPK_qhf3ahA_zRPlwBaGGhSu2P #devsecops #devops #github #romanoroth

How to do Vulnerability Management in GitHub? Session 9: In this video, Padi and I will show you how to manage and track the vulnerabilities with the GitHub Vulnerability Management (Security Tab). Vulnerability Management is the recurring process of identifying, classifying, prioritizing, mitigating, and remediating vulnerabilities ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00 Welcome 00:14 Intro 00:20 How to deal with all these vulnerabilities? 00:40 DevSecOps with GitHub 01:10 Vulnerability Management in GitHub (Security Tab) 02:02 Vulnerability Management Capabilities in GitHub 04:03 Vulnerability Management Limitations in GitHub 06:41 Security Tab 06:58 Secret Scanning 08:26 Coding Scanning 09:22 Dismiss alert 10:48 Create issue 12:12 Fixing the vulnerability 13:21 CI/CD Pipeline reports 13:44 Automatically resolved vulnerability 14:46 Summary 15:45 Outro ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ Source Code https://github.com/romanoroth/GitHubDevSecOps Blog-Post https://www.romanoroth.com/post/gitlab-vs-github-devsecops GitHub https://github.com/ Patrick Steger https://www.linkedin.com/in/patrick-steger-ch/ ▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬ GitHub: DevSecOps: Part 1/12: What is GitHub? The fundamental concepts of a DevSecOps pipeline. https://youtu.be/_m5KYEi1ThA GitHub: DevSecOps: Part 2/12: Introduction to GitHub https://youtu.be/6ZdxXDu8ZDA GitHub: DevSecOps: Part 3/12: Learn How to Use SCA (Software Composition Analysis) https://youtu.be/xM3elerxjYo GitHub: DevSecOps: Part 4/12: How to ensure License Compliance? https://youtu.be/l7IBh2xkDcQ GitHub: DevSecOps: Part 5/12: Protect your Apps with Static Application Security Testing (SAST) https://youtu.be/p4xS2X5KsNk GitHub: DevSecOps: Part 6/12: How to use Container Scanning https://youtu.be/_ZeKh3GcbgU GitHub: DevSecOps: Part 7/12: How to find secrets in your own code with Secret Scanning https://youtu.be/k-uuPTLNXGM GitHub: DevSecOps: Part 8/12: How to use Dynamic Application Security Testing (DAST) https://youtu.be/v_xo1kgNYsE ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Modern Software Engineering https://www.youtube.com/playlist?list=PLrsbMazVPK_rb56rZQr2fyBGR3cyanZpX DevOps https://www.youtube.com/playlist?list=PLrsbMazVPK_ro3fn1G-3Ui2mBPHxOD9kF GitLab: Build a DevSecOps Pipeline https://www.youtube.com/playlist?list=PLrsbMazVPK_qhf3ahA_zRPlwBaGGhSu2P #devsecops #devops #github #romanoroth

🤩 The Zühlke 𝐃𝐞𝐯𝐎𝐩𝐬 𝐂𝐚𝐦𝐩 2023 was a blast! Curious about the Zühlke 𝐃𝐞𝐯𝐎𝐩𝐬 𝐂𝐚𝐦𝐩 2023? Experience the excitement firsthand in our video! Witness the remarkable journey of 7 teams, each comprising 7 talented individuals, as they transform their ideas into reality within just 4 days. Together, they built their own 𝐃𝐢𝐠𝐢𝐭𝐚𝐥 𝐅𝐚𝐜𝐭𝐨𝐫𝐲 utilizing the cutting-edge Zühlke Group 𝐏𝐥𝐚𝐭𝐟𝐨𝐫𝐦 𝐏𝐥𝐚𝐧𝐞 which is build upon best-of-breed tools such as Kubernetes, GitLab, Argo CD, Grafana, Loki, Tempo, Trivy, Kyverno, HashiCorp Vault, and more, these teams use the full potential of 𝐃𝐞𝐯𝐎𝐩𝐬 to create a seamless and efficient 𝐃𝐢𝐠𝐢𝐭𝐚𝐥 𝐅𝐚𝐜𝐭𝐨𝐫𝐲. Join us on this amazing visual adventure that showcases the convergence of development, quality assurance, operations, and security. The teams were able to complete 25 of the 33 challenges: ✅Agile Chartering ✅Setup the DevSecOps platform ✅Backlog ✅Documentation ✅Define the DevSecOps Pipeline ✅Architecture Decision Log ✅Build ✅Define how to ensure quality ✅Unit Test ✅Branching ✅Versioning ✅Software Composition Analysis ✅Integration Test ✅License Compliance ✅Static Application Security Testing ✅System Test ✅Containerization ✅Container Scanning ✅Document the architecture ✅Secret management ✅Feature toggles ✅Environment management ✅Continous Deployment 📌System Integration Test 📌Dynamic Application Security Testing 📌Vulnerability Management 📌Scheduled pipeline ✅End-To-End Testing 📌NFR Testing 📌Monitoring ✅Traceability of requirement 📌Measure 📌Service Level Agreements 😎 I am amazed and incredibly proud of the teams. Your performance was absolutely outstanding! Thank you very much for this amazing experience. 🤗I can't wait to do this workshop with another team and other platforms/tools. ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00 Intro 00:15 Regina Dietiker 00:36 Groups 00:44 Romano Roth 01:00 Challenges 01:25 The view 01:32 Playing together 01:50 Do work that metters 01:55 Group Picture ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ Zühlke DevOps: https://www.zuehlke.com/en/careers/devops Zühlke DevOps Offering: https://www.zuehlke.com/en/expertise/devops Regina Dietiker: https://www.linkedin.com/in/regina-dietiker ▬▬▬▬▬▬ S O U N D 🔊▬▬▬▬▬▬ The Power of Awakening by Rage Sound https://tunetank.com/track/3963-the-power-of-awakening/ ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Modern Software Engineering https://www.youtube.com/playlist?list=PLrsbMazVPK_rb56rZQr2fyBGR3cyanZpX DevOps https://www.youtube.com/playlist?list=PLrsbMazVPK_ro3fn1G-3Ui2mBPHxOD9kF GitLab: Build a DevSecOps Pipeline https://www.youtube.com/playlist?list=PLrsbMazVPK_qhf3ahA_zRPlwBaGGhSu2P #devsecops #devops #github #romanoroth

What is Dynamic Application Security Testing (DAST) ? Session 8: In this video, Padi and I will show you how to find vulnerabilities in your running application using Dynamic Application Security Testing (DAST) in GitHub. ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00 Welcome 00:15 Intro 00:29 DevSecOps with GitHub 01:54 What is Dynamic Application Security Testing (DAST) 02:38 How to do DAST with GitHub? 03:24 How to implement DAST with GitHub? 06:03 Implementation of DAST in the GitHub 06:40 Add new workflow dast.yaml 11:47 Add reference to dast.yaml in main-pipeline.yaml 13:08 Pipeline run 13:13 DAST Job run 14:33 DAST report 14:46 ZAP scanning report 16:31 Automatically creat a issue from the DAST Job run 17:39 The created DAST issue 18:33 Summary 19:57 Outro ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ Source Code https://github.com/romanoroth/GitHubDevSecOps Blog-Post https://www.romanoroth.com/post/gitlab-vs-github-devsecops GitHub https://github.com/ Patrick Steger https://www.linkedin.com/in/patrick-steger-ch/ OWASP ZAP Full Scan https://github.com/marketplace/actions/owasp-zap-full-scan ▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬ GitHub: DevSecOps: Part 1/12: What is GitHub? The fundamental concepts of a DevSecOps pipeline. https://youtu.be/_m5KYEi1ThA GitHub: DevSecOps: Part 2/12: Introduction to GitHub https://youtu.be/6ZdxXDu8ZDA GitHub: DevSecOps: Part 3/12: Learn How to Use SCA (Software Composition Analysis) https://youtu.be/xM3elerxjYo GitHub: DevSecOps: Part 4/12: How to ensure License Compliance? https://youtu.be/l7IBh2xkDcQ GitHub: DevSecOps: Part 5/12: Protect your Apps with Static Application Security Testing (SAST) https://youtu.be/p4xS2X5KsNk GitHub: DevSecOps: Part 6/12: How to use Container Scanning https://youtu.be/_ZeKh3GcbgU GitHub: DevSecOps: Part 7/12: How to find secrets in your own code with Secret Scanning https://youtu.be/k-uuPTLNXGM ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Modern Software Engineering https://www.youtube.com/playlist?list=PLrsbMazVPK_rb56rZQr2fyBGR3cyanZpX DevOps https://www.youtube.com/playlist?list=PLrsbMazVPK_ro3fn1G-3Ui2mBPHxOD9kF GitLab: Build a DevSecOps Pipeline https://www.youtube.com/playlist?list=PLrsbMazVPK_qhf3ahA_zRPlwBaGGhSu2P #devsecops #devops #github #romanoroth

Talk at The DEVOPS Conference - Global 2023: HOW TO ARCHITECT FOR CONTINUOUS DELIVERY? Let's explore the importance of continuous delivery and how you can architect your system for it. By taking a step back and looking at the bigger picture, we can design a system that enables us to deliver code changes frequently and reliably. In this talk, Romano Roth covers the key principles of continuous delivery, the benefits it brings, and how to architect your system for it. #DevOps #ContinuousDelivery #CI/CD #TheDEVOPSConference --- Speaker: In the 20 years where he worked as a software developer, software architect, and consultant for Zühlke, he was able to build up a comprehensive knowledge of software development, architecture, and processes. He has worked with a variety of platforms and technologies, consulting in the sectors of financial, insurance, cyber security, electricity, medical, and aviation. His passion is helping companies bring people, processes, and technology together so that they can deliver continuously value to their customers. In his free time, Romano is organizing the DevOps Meetups Zürich where the DevOps community of Zürich meets together on a monthly basis. He also organizes the DevOps Days Zürich which is a yearly two-day conference. ---- 👇Learn more: https://hubs.li/Q01HY4ll0 https://hubs.li/Q01HY1940 ---- Timestamps: 00:00 Intro 02:25 Todays challenges 08:50 Science behind DevOps 10:40 The dora metrics 14:40 How DvOps looks like at scale 19:23 When the cognitive load is too high? 21:40 Platform engineering scales the platform 24:20 We are entering in the age of industrialization

What is Secret Scanning 🤫? Part 7/12: In this video, Padi and I will show you how to find secrets in your own code or configuration files with GitHub. ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00 Welcome 00:28 Intro 00:34 DevSecOps with GitHub 01:26 About Secret Scanning 03:13 Secrets in the source code? 04:15 How to enable Secret Scanning 04:56 How to review Secret Scanning findings 05:53 Supported secrets for advanced security 07:12 Enable Secret Scanning in GitHub 07:23 Enable Push Protection 07:33 Define custom pattern 08:57 Add secrets to the code 09:59 Publish rule 10:22 Secret scanning results 10:27 Why did it not find the other secrets? 11:26 Add Azure Secret 11:59 Why is push protection not working? 12:43 Secret scanning results 13:06 Summary ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ Source Code https://github.com/romanoroth/GitHubDevSecOps Blog-Post https://www.romanoroth.com/post/gitlab-vs-github-devsecops GitHub https://github.com/ Patrick Steger https://www.linkedin.com/in/patrick-steger-ch/ Secret Scanning in GitHub https://docs.github.com/en/code-security/secret-scanning/about-secret-scanning ▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬ GitHub: DevSecOps: Part 1/12: What is GitHub? The fundamental concepts of a DevSecOps pipeline. https://youtu.be/_m5KYEi1ThA GitHub: DevSecOps: Part 2/12: Introduction to GitHub https://youtu.be/6ZdxXDu8ZDA GitHub: DevSecOps: Part 3/12: Learn How to Use SCA (Software Composition Analysis) https://youtu.be/xM3elerxjYo GitHub: DevSecOps: Part 4/12: How to ensure License Compliance? https://youtu.be/l7IBh2xkDcQ GitHub: DevSecOps: Part 5/12: Protect your Apps with Static Application Security Testing (SAST) https://youtu.be/p4xS2X5KsNk GitHub: DevSecOps: Part 6/12: How to use Container Scanning https://youtu.be/_ZeKh3GcbgU GitHub: DevSecOps: Part 7/12: How to find secrets in your own code with Secret Scanning https://youtu.be/k-uuPTLNXGM ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Modern Software Engineering https://www.youtube.com/playlist?list=PLrsbMazVPK_rb56rZQr2fyBGR3cyanZpX DevOps https://www.youtube.com/playlist?list=PLrsbMazVPK_ro3fn1G-3Ui2mBPHxOD9kF GitLab: Build a DevSecOps Pipeline https://www.youtube.com/playlist?list=PLrsbMazVPK_qhf3ahA_zRPlwBaGGhSu2P #devsecops #devops #github #romanoroth

How to do Container Scanning 📦 in GitHub? Part 6/12: In this video, Padi and I will show you how to find vulnerabilities in your container images with GitHub. ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00 Welcome 00:22 Intro 00:27 DevSecOps with GitHub 01:26 About Container Image Scanning 02:25 Container Image Scanning implementation details 03:07 Add Container Image Scanning to Main-Pipeline.yml 04:50 Add docker.yml 07:49 Add container-image-scan.yaml 10:20 Pipeline results 10:58 Container Image Scanning results 11:49 How to deal with duplicates findings 14:04 Summary ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ Source Code https://github.com/romanoroth/GitHubDevSecOps Blog-Post https://www.romanoroth.com/post/gitlab-vs-github-devsecops GitHub https://github.com/ Patrick Steger https://www.linkedin.com/in/patrick-steger-ch/ Container Scanning in GitLab https://learn.microsoft.com/en-us/azure/container-registry/github-action-scan ▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬ GitHub: DevSecOps: Part 1/12: What is GitHub? The fundamental concepts of a DevSecOps pipeline. https://youtu.be/_m5KYEi1ThA GitHub: DevSecOps: Part 2/12: Introduction to GitHub https://youtu.be/6ZdxXDu8ZDA GitHub: DevSecOps: Part 3/12: Learn How to Use SCA (Software Composition Analysis) https://youtu.be/xM3elerxjYo GitHub: DevSecOps: Part 4/12: How to ensure License Compliance? https://youtu.be/l7IBh2xkDcQ GitHub: DevSecOps: Part 5/12: Protect your Apps with Static Application Security Testing (SAST) https://youtu.be/p4xS2X5KsNk GitHub: DevSecOps: Part 6/12: How to use Container Scanning https://youtu.be/_ZeKh3GcbgU ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Modern Software Engineering https://www.youtube.com/playlist?list=PLrsbMazVPK_rb56rZQr2fyBGR3cyanZpX DevOps https://www.youtube.com/playlist?list=PLrsbMazVPK_ro3fn1G-3Ui2mBPHxOD9kF GitLab: Build a DevSecOps Pipeline https://www.youtube.com/playlist?list=PLrsbMazVPK_qhf3ahA_zRPlwBaGGhSu2P #devsecops #devops #github #romanoroth

How to do Static Application Security Testing (SAST) 🛡️ in GitHub and to succeed with this critical security configuration. Part 5/12: In this video, Padi and I will show you how to find vulnerabilities in your code using Static Application Security Testing (SAST) in GitHub. ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00 Welcome 00:27 Intro 00:33 DevSecOps with GitHub 01:05 About SAST 03:15 How to Implement SAST with GitHub 05:16 Add SAST to Main-Pipeline.yml 06:10 Create sast.yml 07:40 SAST with CodeQL 09:54 SAST with SpotBugs 10:49 SAST with Semgrep 12:23 Pipeline results 13:27 CodeQL findings 14:17 Semgrep findings 15:16 What didn't we find with these tools? 16:47 Summary ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ Source Code https://github.com/romanoroth/GitHubDevSecOps Blog-Post https://www.romanoroth.com/post/gitlab-vs-github-devsecops GitHub https://github.com/ Patrick Steger https://www.linkedin.com/in/patrick-steger-ch/ Static Application Security Testing (SAST) in GitHub https://github.com/features/security/code ▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬ GitHub: DevSecOps: Part 1/12: What is GitHub? The fundamental concepts of a DevSecOps pipeline. https://youtu.be/_m5KYEi1ThA GitHub: DevSecOps: Part 2/12: Introduction to GitHub https://youtu.be/6ZdxXDu8ZDA GitHub: DevSecOps: Part 3/12: Learn How to Use SCA (Software Composition Analysis) https://youtu.be/xM3elerxjYo GitHub: DevSecOps: Part 4/12: How to ensure License Compliance? https://youtu.be/l7IBh2xkDcQ GitHub: DevSecOps: Part 5/12: Protect your Apps with Static Application Security Testing (SAST) https://youtu.be/p4xS2X5KsNk ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Modern Software Engineering https://www.youtube.com/playlist?list=PLrsbMazVPK_rb56rZQr2fyBGR3cyanZpX DevOps https://www.youtube.com/playlist?list=PLrsbMazVPK_ro3fn1G-3Ui2mBPHxOD9kF GitLab: Build a DevSecOps Pipeline https://www.youtube.com/playlist?list=PLrsbMazVPK_qhf3ahA_zRPlwBaGGhSu2P #devsecops #devops #github #romanoroth

How to ensure License Compliance in GitHub? Part 4/12: In this video, Padi and I will show you in GitHub how you can manage what licences are acceptable for your project and what licences are already used. ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00 Welcome 00:15 Intro 00:21 DevSecOps with GitHub 00:55 Why do we need to ensure License Compliance? 02:17 What is License Compliance 03:10 Action: License Finder Scan 03:56 License Compliance implementation details 04:52 Add License Compliance to Main-Pipeline.yml 05:31 Create license-compliance.yml 06:50 Configuring License Finder Scan 09:05 Pipeline results 09:40 License Compliance Check results 10:26 But these licenses are ok 10:45 But who decides which licenses are ok? 11:43 Adding approved license 12:48 Pipeline results 13:06 Summary ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ Source Code https://github.com/romanoroth/GitHubDevSecOps Blog-Post https://www.romanoroth.com/post/gitlab-vs-github-devsecops GitHub https://github.com/ Patrick Steger https://www.linkedin.com/in/patrick-steger-ch/ ▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬ GitHub: DevSecOps: Part 1/12: What is GitHub? The fundamental concepts of a DevSecOps pipeline. https://youtu.be/_m5KYEi1ThA GitHub: DevSecOps: Part 2/12: Introduction to GitHub https://youtu.be/6ZdxXDu8ZDA GitHub: DevSecOps: Part 3/12: Learn How to Use SCA (Software Composition Analysis) https://youtu.be/xM3elerxjYo GitHub: DevSecOps: Part 4/12: How to ensure License Compliance? https://youtu.be/l7IBh2xkDcQ ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Modern Software Engineering https://www.youtube.com/playlist?list=PLrsbMazVPK_rb56rZQr2fyBGR3cyanZpX DevOps https://www.youtube.com/playlist?list=PLrsbMazVPK_ro3fn1G-3Ui2mBPHxOD9kF GitLab: Build a DevSecOps Pipeline https://www.youtube.com/playlist?list=PLrsbMazVPK_qhf3ahA_zRPlwBaGGhSu2P #devsecops #devops #github #romanoroth

What is Software Composition Analysis (SCA) in GitHub? Part 3/12: In this video, Padi and I will show you how to find vulnerabilities in dependencies in your code by using Software Composition Analysis (SCA) or Dependency Scanning. ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00 Welcome 00:17 Intro 00:23 DevSecOps with GitHub 00:58 What is Software Composition Analysis 03:17 SCA with Code Ready Dependency Analytics 04:32 SCA implementation details 05:20 Dependency graph and Dependabot 06:12 Dependabot implementation details 06:59 Enable Dependency Graph in GitHub 07:25 Enable Dependabot 08:33 Dependency Graph Results 09:10 Dependabot alerts 10:04 Enable code scanning for the repository 10:40 Configure code scanning 11:13 Add SCA to Main-Pipeline.yml 12:38 Create sca.yml 15:58 Adding a the SNYK_KEY to the repository secret 16:24 How to get the SNYK_KEY 17:15 Pipeline result 18:00 Critique 19:46 Findings 20:52 Summary ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ Source Code https://github.com/romanoroth/GitHubDevSecOps Blog-Post https://www.romanoroth.com/post/gitlab-vs-github-devsecops GitHub https://github.com/ Patrick Steger https://www.linkedin.com/in/patrick-steger-ch/ ▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬ GitHub: DevSecOps: Part 1/12: What is GitHub? The fundamental concepts of a DevSecOps pipeline. https://youtu.be/_m5KYEi1ThA GitHub: DevSecOps: Part 2/12: Introduction to GitHub https://youtu.be/6ZdxXDu8ZDA GitHub: DevSecOps: Part 3/12: Learn How to Use SCA (Software Composition Analysis) https://youtu.be/xM3elerxjYo ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Modern Software Engineering https://www.youtube.com/playlist?list=PLrsbMazVPK_rb56rZQr2fyBGR3cyanZpX DevOps https://www.youtube.com/playlist?list=PLrsbMazVPK_ro3fn1G-3Ui2mBPHxOD9kF GitLab: Build a DevSecOps Pipeline https://www.youtube.com/playlist?list=PLrsbMazVPK_qhf3ahA_zRPlwBaGGhSu2P #devsecops #devops #github #romanoroth

Join Christian Moser and Michele Fuhs and Romano Roth while they are exploring and discussing the Metaverse possibilities which are provided by Arthur Digital and Circle4x. We will visit: 📌Circle4x Office 📌Case BMW Dealership 📌Creative Workshop Arena 📌Scrum & PI-Planning Area 📌Romanos Retreat 😅 📌Mars Note: The video is in german. ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00 Intro 01:17 Oculus Quest 2 vs. Pico 4 02:13 Use Cases of VR 09:28 BMW Dealership 13:09 Creative Workshop Arena 20:27 Scrum & PI-Planning 28:58 Romanos Retreat 35:03 Mars ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ Michele Fuhs https://www.linkedin.com/in/michele-fuhs-8b724117/ Circle4x https://circle4x.com/ Arthur Digital https://www.arthur.digital/ Christian Moser https://www.linkedin.com/in/moserch/ ▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬ Virtual Reality Businesses: The Metaverse Is the Future https://youtu.be/QWo0enfjqIY Business Meetings in the Metaverse: It's not a Game - Here's Why https://youtu.be/LMSSxDXummg ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Modern Software Engineering https://www.youtube.com/playlist?list=PLrsbMazVPK_rb56rZQr2fyBGR3cyanZpX DevOps https://www.youtube.com/playlist?list=PLrsbMazVPK_ro3fn1G-3Ui2mBPHxOD9kF GitLab: Build a DevSecOps Pipeline https://www.youtube.com/playlist?list=PLrsbMazVPK_qhf3ahA_zRPlwBaGGhSu2P #devsecops #devops #romanoroth

Introduction to GitHub | Creating and building a project Part 2/12: In this video, Padi and I will introduce our Demo project in GitHub and create a simple pipeline that builds the Java projects and executes the Unit Tests. ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00 Welcome 00:11 Intro 00:17 Introduction and Basic Pipeline 00:26 DevSecOps with GitHub 00:42 Demo Project 01:37 Pre-Requisites for using GitHub 02:35 Create a repository and build 04:06 Sign-In to GitHub 05:13 Create a new repository 06:19 Code 06:31 Issues 06:40 Pull requests 06:52 Actions 07:03 Projects 07:15 Wiki 07:21 Security 07:36 Insights 07:52 Settings 08:12 Action permissions 10:32 Import code 10:55 The demo project 11:56 Create the pipeline 12:26 main-pipeline.yml 14:25 build.yml 17:26 Workflow run 18:35 Artefacts 18:46 Test results 19:02 Build Job 19:30 GitHub marketplace 21:11 Summary ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ Source Code https://github.com/romanoroth/GitHubDevSecOps Blog-Post https://www.romanoroth.com/post/gitlab-vs-github-devsecops GitHub https://github.com/ Patrick Steger https://www.linkedin.com/in/patrick-steger-ch/ ▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬ GitHub: DevSecOps: Part 1/12: What is GitHub? The fundamental concepts of a DevSecOps pipeline. https://youtu.be/_m5KYEi1ThA GitHub: DevSecOps: Part 2/12: Introduction to GitHub https://youtu.be/6ZdxXDu8ZDA ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Modern Software Engineering https://www.youtube.com/playlist?list=PLrsbMazVPK_rb56rZQr2fyBGR3cyanZpX DevOps https://www.youtube.com/playlist?list=PLrsbMazVPK_ro3fn1G-3Ui2mBPHxOD9kF GitLab: Build a DevSecOps Pipeline https://www.youtube.com/playlist?list=PLrsbMazVPK_qhf3ahA_zRPlwBaGGhSu2P #devsecops #devops #github #romanoroth

"DevOps is dead!" Either this is just clickbait from companies that want to sell you their products or services in Platform Engineering or they do not understand what DevOps is. 𝐃𝐞𝐯𝐎𝐩𝐬 is a 𝐦𝐢𝐧𝐝𝐬𝐞𝐭, a 𝐜𝐮𝐥𝐭𝐮𝐫𝐞, and a set of 𝐭𝐞𝐜𝐡𝐧𝐢𝐜𝐚𝐥 𝐩𝐫𝐚𝐜𝐭𝐢𝐜𝐞𝐬. It provides communication, integration, automation, and close cooperation among all the people needed to plan, develop, test, deploy, release, and maintain a product and deliver continuous value to the customer. 𝐏𝐥𝐚𝐭𝐟𝐨𝐫𝐦 𝐞𝐧𝐠𝐢𝐧𝐞𝐞𝐫𝐢𝐧𝐠 is the discipline of designing and building toolchains and workflows that enable self-service capabilities for product teams that deliver continuous value to the customer. 𝐒𝐢𝐭𝐞 𝐫𝐞𝐥𝐢𝐚𝐛𝐢𝐥𝐢𝐭𝐲 𝐞𝐧𝐠𝐢𝐧𝐞𝐞𝐫𝐢𝐧𝐠 (𝐒𝐑𝐄) is a discipline of designing , developing, and maintaining highly reliable software systems. 👉 Platform engineering uses DevOps practices, enabling product teams to do DevOps. 👉 SRE uses DevOps practices to build and maintain highly reliable and scalable systems. ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00 DevOps is Dead! 00:27 Intro 00:33 What are today’s Challenges? 02:49 What is DevOps? 03:29 Who is DevOps? 04:49 DevOps (Definition) 05:05 What does DevOps look like? 06:30 DevOps Team Silo 07:17 Remote DevOps Silo 07:47 DevOps: Close collaboration 08:12 DevOps: Fully shared Ops 09:08 What does DevOps Look like at Scale? 10:30 DevOps at Scale: Shared Ops 11:05 Platform Engineering Scales the Platform to Multiple Product Teams 11:55 Platform Engineering Enables DevOps in Product Teams 13:09 Platform Engineering Enables DevOps 13:32 Platform Engineering (Definition) 13:50 Site Reliability Engineering (SRE) 15:32 When do we need an SRE? 15:40 Availability Targets 16:42 When do we need an SRE? 17:10 Site Reliability Engineering (Definition) 17:26 Summary 18:55 End ▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬ DevOps – Thinking in Systems & Value Streams https://youtu.be/ImbhUFr6suw ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Modern Software Engineering https://www.youtube.com/playlist?list=PLrsbMazVPK_rb56rZQr2fyBGR3cyanZpX DevOps https://www.youtube.com/playlist?list=PLrsbMazVPK_ro3fn1G-3Ui2mBPHxOD9kF GitLab: Build a DevSecOps Pipeline https://www.youtube.com/playlist?list=PLrsbMazVPK_qhf3ahA_zRPlwBaGGhSu2P #devsecops #devops #romanoroth

Am 08.12.22 haben Dirk Lehmann und ich beim Bundesamt für Informatik und Telekommunikation (BIT) in der PO Werkstatt ein Impulsreferat zum Thema "DevOps mit SAP Theory und Praxis" gehalten. ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00 Intro 00:10 DevOps in der Theory 00:17 Romano Roth 01:53 Die heutigen Herasuforderungen 03:13 Woher kommen diese Herausforderungen? 03:55 Es geht um Produkte! 04:00 Was ist der unterschied von Projekten und Produkten? 04:52 Was ist DevOps? 05:10 Wer ist DevOps? 06:17 Warum ist das wichtig für Euch? 06:55 Beispiel 09:01 Vorteile von DevOps 10:00 Die moderne Produkt Entwicklung 11:41 Wie kommt man von Projekten zu Produkten? 11:46 Im ganzheitlichen System denken 11:51 Wertstrom Analyse 14:26 Die Continuous Delivery Pipeline 14:35 Continuous Integration 15:24 Continuous Delivery 15:49 Continuous Deployment 16:23 CI/CD 16:39 Qualität einbauen 16:44 Traditionelle Testen vs. Agiles Testen 18:20 Traditionelle Test Pyramide vs Agile Test Pyramide 19:14 Kontinuirliches Testen 19:57 Zusammenfassung 20:52 DevOps in der Praxis 21:55 Dirk Lehmann 23:06 Wie macht man DevOps mit SAP? 23:39 DevOps funktioniert nicht?! 24:31 Wurde nicht schon alles zu DevOps gesagt? 24:51 Wo sind die Einhörner? 26:13 Lasst uns die Einhörner kopieren 26:57 Was man nicht kopieren kann 29:43 Der Hype Cylce 31:10 Was wollen wir eigentlich? 32:50 Was sollten wir anstreben? 35:25 Feature creep 38:00 Die feature creep Kurve 39:20 Die Mutter aller Software Entwicklungs Fragen 40:31 Die wichtigsten Erkenntnisse 41:43 Was ist jetzt mit DevOps bei SAP? 43:57 Schluss ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ BIT (Bundesamt für Informatik und Telekommunikation) https://www.bit.admin.ch/ Dirk Lehmann https://de.linkedin.com/in/dirk-lehmann-7712bb125 ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Modern Software Engineering https://www.youtube.com/playlist?list=PLrsbMazVPK_rb56rZQr2fyBGR3cyanZpX DevOps https://www.youtube.com/playlist?list=PLrsbMazVPK_ro3fn1G-3Ui2mBPHxOD9kF GitLab: Build a DevSecOps Pipeline https://www.youtube.com/playlist?list=PLrsbMazVPK_qhf3ahA_zRPlwBaGGhSu2P #devsecops #devops #github #romanorotht

What is GitHub? The fundamental concepts of a DevSecOps pipeline. Part 1/12: In this video, Padi and I will explore the fundamental concepts of how to build a DevSecOps pipeline with GitHub. Everything You NEED TO KNOW About GitHub ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00 Welcome 00:51 Intro 00:57 GitLab DevSecOps pipeline 01:29 What is GitHub? 02:12 What we want 03:07 Continuous integration (CI) 04:48 Continuous delivery (CD) 05:53 Continuous deployment (CD) 07:59 Continuous integration / Continuous deployment CI/CD 08:52 Continuous Delivery Pipeline 10:36 GitHub is a Continuous Delivery Pipeline: Promise 11:08 GitHub is a Continuous Delivery Pipeline: Actual 11:41 Shift Security Left with GitHub Advanced Security 12:57 DevSecOps with GitHub 13:25 Outro ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ Source Code https://github.com/romanoroth/GitHubDevSecOps Blog-Post https://www.romanoroth.com/post/gitlab-vs-github-devsecops GitHub https://github.com/ Patrick Steger https://www.linkedin.com/in/patrick-steger-ch/ ▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬ GitHub: DevSecOps: Part 1/12: What is GitHub? The fundamental concepts of a DevSecOps pipeline. https://youtu.be/_m5KYEi1ThA GitLab: Build a DevSecOps Pipeline: https://www.youtube.com/watch?v=dphgw9xxjuw&list=PLrsbMazVPK_qhf3ahA_zRPlwBaGGhSu2P What is Continuous Integration (CI)? https://youtu.be/SdmlS8JyyMw What is Continuous Integration 🧩? https://youtu.be/yWIvffpfUAo What is Continuous Delivery (CD)? https://youtu.be/S7cYebyAjqs What is Continuous Deployment 🚚? https://youtu.be/y8VndBYPWgM What is Continuous Deployment (CD)? https://youtu.be/97CGyAdWyaw What is a Continuous Delivery Pipeline (CDP)? https://youtu.be/tKoCJQorkc0 What is the difference between deployment and release? https://youtu.be/qmItPR0I-OE ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Modern Software Engineering https://www.youtube.com/playlist?list=PLrsbMazVPK_rb56rZQr2fyBGR3cyanZpX DevOps https://www.youtube.com/playlist?list=PLrsbMazVPK_ro3fn1G-3Ui2mBPHxOD9kF GitLab: Build a DevSecOps Pipeline https://www.youtube.com/playlist?list=PLrsbMazVPK_qhf3ahA_zRPlwBaGGhSu2P #devsecops #devops #github #romanoroth

I will show you what the DevOps top trends 2023 are for: 📌building products, 📌running products, 📌ensuring the quality of products, 📌monitoring products, 📌organizing across the value stream, 📌enabling DevOps in your product teams, 📌and industrializing the whole product development. ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00 Welcome 00:17 intro 00:23 Overview 00:56 DevOps Trends 2021 and 2022 01:46 What are today’s Challenges? 02:43 In which direction are we moving? 03:19 Overview of Top DevOps Trends 2023 03:52 How we build products 05:37 How we run products 06:44 How we ensure the quality of our products 10:19 How we monitor products 13:37 How we organize our product teams 16:41 How we enable DevOps in our product teams 17:46 How we industrialize our product development 19:10 Summary ▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬ What are the top DevOps trends in 2021? https://youtu.be/9jPmGqWOlWQ What are the top DevOps trends in 2022? https://youtu.be/Dn9sQ9GpmOc What is TDD? https://youtu.be/WdIpfiXcjxc What is BDD (Behavior Driven Development)? https://youtu.be/7FXbEHBUgQM Agile Testing https://youtu.be/giwMXwT6BrY Agile Test Pyramide https://youtu.be/ktQOrCYSE1E What is DevOps? https://youtu.be/72RDgbVve68 ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Modern Software Engineering https://www.youtube.com/playlist?list=PLrsbMazVPK_rb56rZQr2fyBGR3cyanZpX DevOps https://www.youtube.com/playlist?list=PLrsbMazVPK_ro3fn1G-3Ui2mBPHxOD9kF GitLab: Build a DevSecOps Pipeline https://www.youtube.com/playlist?list=PLrsbMazVPK_qhf3ahA_zRPlwBaGGhSu2P #devsecops #devops #romanoroth

ChatGPT has been blowing many people's minds. It can code, answer most of your questions, write content, etc. In this post, I show you how to display ChatGPT responses alongside Google Search results so that you get the most out of ChatGPT! It is pretty simple: 1. Go to the Chrome Webstore 2. Search for "ChatGPT for Google" 3. Add to Chrome 4. Go to Google and search for something. 5. Done, have fun ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00 Intro 00:28 What is ChatGPT 00:50 Uses cases 01:03 Limitations 01:23 Example 01:46 ChatGPT: What is FinOps 01:57 Google: What is FinOps 02:54 Install "ChatGPT for Google" 03:15 Google with ChatGPT 03:38 Awesome ChatGPT Prompts 04:16 Finish ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ ChatGPT for Google https://chrome.google.com/webstore/detail/chatgpt-for-google/jgjaeacdkonaoafenlfkkkmbaopkbilf Awesome ChatGPT Prompts https://github.com/f/awesome-chatgpt-prompts ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Modern Software Engineering https://www.youtube.com/playlist?list=PLrsbMazVPK_rb56rZQr2fyBGR3cyanZpX DevOps https://www.youtube.com/playlist?list=PLrsbMazVPK_ro3fn1G-3Ui2mBPHxOD9kF GitLab: Build a DevSecOps Pipeline https://www.youtube.com/playlist?list=PLrsbMazVPK_qhf3ahA_zRPlwBaGGhSu2P #devsecops #devops #romanoroth

Expert Talks: High-quality work in Software Engineering & Build great products with DevOps In this Expert Talk, Dr. Milan Milanović, Chief of Technology Officer at 3MD talks about what is 𝗛𝗶𝗴𝗵-𝗾𝘂𝗮𝗹𝗶𝘁𝘆 𝘄𝗼𝗿𝗸 𝗶𝗻 𝗦𝗼𝗳𝘁𝘄𝗮𝗿𝗲 𝗘𝗻𝗴𝗶𝗻𝗲𝗲𝗿𝗶𝗻𝗴 and what is not and I will talk about how to 𝗕𝘂𝗶𝗹𝗱 𝗴𝗿𝗲𝗮𝘁 𝗽𝗿𝗼𝗱𝘂𝗰𝘁𝘀 𝘄𝗶𝘁𝗵 𝗗𝗲𝘃𝗢𝗽𝘀. ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00 Introduction 00:05 Welcome 01:14 High-quality work in Software Engineering 01:26 About Milan 02:02 What makes high-quality engineering work? 02:53 You need a great team 03:22 Built-in Quality pillars 03:56 Start with the Customer 04:39 Iterative Development 05:24 Continous Deployment 06:21 Project Paradox 07:44 Conways's Law 08:54 Simple Design vs Architecture 09:30 Simple Design 10:13 Start with a (modular) monolith 11:01 Fighting complexity 11:05 technical debt 12:04 Types of technical debt 12:38 How to fight tech debt 14:02 What about bad code 14:39 Why we write bad code 15:06 What can we do 15:57 Engineering Culture 18:21 Engineering Practices 21:13 Books and material 21:59 Don't just learn, do 22:29 Thank you 22:31 Build great products with DevOps 22:39 About Romano 23:56 What are today's challenges 25:28 Where do these challenges come from? 26:15 It's about products! 26:20 What does that mean? 27:18 What is DevOps? 27:42 Who is DevOps? 28:35 DevOps 28:48 Product Development 30:34 But how do we get from projects to products? 30:40 Apply whole system thinking 30:47 Identify bottlenecks in your development process 33:11 Build a Continuous Delivery Pipeline 33:17 Continuous integration (CI) 34:22 Continuous delivery (CD) 34:50 Continuous deployment (CD) 35:50 Example of a CI/CD Pipeline 36:05 Example of a Continuous Delivery Pipeline 36:23 Recommendation: Use a platform for your CDP 36:33 ...and replace the inadequate parts 36:54 Digital Factory 37:22 Platform Engineering 37:38 Built-in quality 37:45 Test fast for continuous feedback 39:49 The right balance of tests 40:29 Continuous Testing 41:10 Build for operability 41:19 You build it you run it! 42:48 We need to architect for operability 43:31 Summary ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ Dr. Milan Milanović https://www.linkedin.com/in/milanmilanovic/ https://youtu.be/AuyNDiNHTls ▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬ What is DevOps? https://youtu.be/72RDgbVve68 Who is DevOps? https://youtu.be/ZKlSNpT0h-4 How can we improve value streams? https://youtu.be/oThy-JNwecc Why to create value faster? https://youtu.be/k89T-SVk6cE What is Continuous Integration 🧩? https://youtu.be/yWIvffpfUAo What is Continuous Deployment 🚚? https://youtu.be/y8VndBYPWgM What is the difference between traditional testing and agile testing? https://youtu.be/giwMXwT6BrY What is the difference between the traditional test pyramid and the agile test pyramid? https://youtu.be/ktQOrCYSE1E What is Respond 🚨? | SAFe DevOps Health Radar https://youtu.be/EfLLfdAWQsQ What is Stabilize ⚖️? | SAFe DevOps Health Radar https://youtu.be/XSO02OK92vE ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Modern Software Engineering https://www.youtube.com/playlist?list=PLrsbMazVPK_rb56rZQr2fyBGR3cyanZpX DevOps https://www.youtube.com/playlist?list=PLrsbMazVPK_ro3fn1G-3Ui2mBPHxOD9kF GitLab: Build a DevSecOps Pipeline https://www.youtube.com/playlist?list=PLrsbMazVPK_qhf3ahA_zRPlwBaGGhSu2P #devsecops #devops #github #romanoroth

How to survive Game of Thrones in the workplace: A guide for conflict management In this video, you will learn that we are predators and violent. I will show you the 5 characteristics Predatory, Dominance, Revenge, Sadism, and Ideology and that they can be managed by Empathy, Self-Control, Moral, and Mind. By knowing these characteristics you suddenly understand WHY people behave the way they behave. Furthermore, you will learn about the conflict types, escalation and de-escalation, conflict resolution strategy matrix, and battle map. With this knowledge, you can use your mind and your empathies (the angels) and the knowledge about the 5 characteristics (the demons) to analyse every conflict and devise a good plan to solve the conflict. Stay strong and healthy because Winter is coming. ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00 Introduction 00:09 About me 01:16 Why 02:29 Violence 03:28 Predatory 05:03 Dominance 06:09 Revenge 07:17 Sadism 08:05 Ideology 09:27 The five demons 09:53 Empathy 11:09 Self-Control 12:24 Moral 12:43 Mind 13:16 Summary of five demons and four angels 14:26 Conflict 15:04 Conflict management 15:43 Conflict types 16:01 Conflict of goals 16:38 Relationship Conflict 17:25 Conflict of matter 18:00 Conflict of strategy 18:39 Conflict of value 19:35 Role conflict 20:28 Conflict of interest 21:11 Summary of conflict types 22:04 Conflict escalation 22:16 Win-Win 22:30 Tension 22:45 Debate 23:07 Action instead of words 23:33 Win-Lose 22:44 Coalitions 23:58 Loss of face 24:14 Threat strategies 24:27 Lose-Lose 24:37 Limited destruction 25:00 Total extinction 25:10 Together into the abyss 26:04 Conflict de-escalation 26:59 Conflict Resolution: Strategy Matrix 28:36 Conflict Resolution: Battle Map 30:24 Summary conflict 31:18 Personal survival strategy 31:47 Meditation 33:25 Sleep 34:28 The End ▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬ The Better Angels of Our Nature: Why Violence Has Declined by Steven Pinker: https://amzn.to/3q2DPPC Konfliktmanagement: Ein Handbuch für Führung, Beratung und Mediation by Friedrich Glasl: https://www.amazon.de/Konfliktmanagement-Handbuch-F%C3%BChrung-Beratung-Mediation ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ Copyright of all images by HBO Game of Thrones. Images downloaded 2018. http://abovethelaw.com/wp-content/uploads/2015/04/game-of-thrones.jpg http://jonvilma.com/images/game-of-thrones-season-6-3.jpg https://cdn1.thr.com/sites/default/files/2015/11/nights-king_-_h_2015.jpg https://edge.alluremedia.com.au/m/g/2017/08/2017-08-07_132810.jpg https://www.thedailybeast.com/charles-dance-on-tywin-lannisters-s5-return-a-game-of-thrones-movie-and-sexy-peter-dinklage ... ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Modern Software Engineering https://www.youtube.com/playlist?list=PLrsbMazVPK_rb56rZQr2fyBGR3cyanZpX DevOps https://www.youtube.com/playlist?list=PLrsbMazVPK_ro3fn1G-3Ui2mBPHxOD9kF GitLab: Build a DevSecOps Pipeline https://www.youtube.com/playlist?list=PLrsbMazVPK_qhf3ahA_zRPlwBaGGhSu2P #devsecops #devops #github #romanoroth

Recording of my Baloise OpenX Day 2022 keynote about DevOps. In today's world, everybody wants to do DevOps. But why? What problems are we trying to solve? Together we will take a step back and look at how you can architect for continuous delivery. ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00:00 Intro 00:00:16 Agenda 00:00:44 About me 00:02:22 What are today's challenges 00:03:48 Where do these challenges come from? 00:04:45 It's about products! 00:04:50 What does that mean? 00:05:51 What is DevOps? 00:06:23 Who is DevOps? 00:07:19 DevOps 00:07:30 Why is this important for you? 00:08:21 Example? 00:10:56 DevOps benefits (2019) 00:13:49 DevOps benefits (2021) 00:14:19 Product Development 00:17:01 Discussion: Hypothesis 1: DevOps is Bullshit 00:24:34 But how do we get from projects to products? 00:24:43 Apply whole system thinking 00:25:00 Identify bottlenecks in your development process 00:30:35 Build a Continuous Delivery Pipeline 00:30:43 Continuous integration (CI) 00:31:52 Continuous delivery (CD) 00:32:26 Continuous deployment (CD) 00:33:12 CI/CD Continuous Integration / Continuous Deployment 00:33:58 Example of a CI/CD Pipeline 00:34:39 Example of a Continuous Delivery Pipeline 00:35:34 Recommendation: Use a platform for your CDP 00:35:51 Replace the inadequate parts 00:36:38 The CDP is the conveyor belt of your digital factory 00:37:30 Discussion: Hypothesis 2: DevOps is dead, long live Platform Engineering 00:58:39 Built-in quality 00:58:54 Test fast for continuous feedback 01:02:41 Not every test needs to be automated 01:04:10 The right balance of tests 01:05:38 Continuous Testing 01:07:32 Build for operability 01:07:39 You build it you run it! 01:09:15 Evolution of monitoring 01:11:35 We need to architect for operability 01:13:40 Summary 01:15:10 Discussion: Hypothesis 3: Devs don't want to do ops ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ Baloise: https://www.baloise.ch/ ▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬ What is DevOps? https://youtu.be/72RDgbVve68 Who is DevOps? https://youtu.be/ZKlSNpT0h-4 How can we improve value streams? https://youtu.be/oThy-JNwecc Why to create value faster? https://youtu.be/k89T-SVk6cE What is Continuous Integration 🧩? https://youtu.be/yWIvffpfUAo What is Continuous Deployment 🚚? https://youtu.be/y8VndBYPWgM What is the difference between traditional testing and agile testing? https://youtu.be/giwMXwT6BrY What is the difference between the traditional test pyramid and the agile test pyramid? https://youtu.be/ktQOrCYSE1E What is Respond 🚨? | SAFe DevOps Health Radar https://youtu.be/EfLLfdAWQsQ What is Stabilize ⚖️? | SAFe DevOps Health Radar https://youtu.be/XSO02OK92vE ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Software Testing https://youtube.com/playlist?list=PLrsbMazVPK_rwfoyN9CjxWEtNK-jsDNQW Extreme Programming https://www.youtube.com/playlist?list=PLrsbMazVPK_qyNeGfjb81feRc7jncUMp4 Business Process Management https://www.youtube.com/playlist?list=PLrsbMazVPK_ptz-P_BiGKTGaFg6cpN-l- #DevSecOps #DevOps #RomanoRoth

How to build a DevSecOps pipeline with Gitlab: Our Recommendations Session 12: In this video, Padi and I will present you our recommendations for setting up a DevSecOps Pipeline with GitLab. ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00 Welcome 00:18 Introduction 00:24 DevSecOps with GitLab 02:09 Recommendations 02:16 Define a default branch 02:33 Define a scheduled pipeline 02:58 Use merge requests 03:25 Use a vault to store credentials 03:53 Use out-of-the-box GitLab tooling 04:11 Customize the DAST scanner 04:33 Include a Security Expert 05:09 Summary ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ Source Code https://gitlab.com/romano_roth/gitlabdevsecopspipeline Blog-Post https://www.romanoroth.com/post/gitlab-vs-github-devsecops GitLab https://about.gitlab.com/ Patrick Steger https://www.linkedin.com/in/patrick-steger-ch/ ▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬ Session 1: What is GitLab 🦊? | The fundamental concepts https://youtu.be/sHK8uN5fBhs Session 2: Introduction to GitLab 🦊 | Creating a simple project https://youtu.be/GQ3x9bkCK90 Session 3: What is Software Composition Analysis (SCA) 🧩 in GitLab? https://youtu.be/l69W5Ym_M5o Session 4: How to ensure License Compliance 📜 in GitLab? https://youtu.be/Kmbj_PCiHyk Session 5: How to do Static Application Security Testing (SAST) 🛡️ in GitLab? https://youtu.be/owwIMUamdDc Session 6: How to do Container Scanning 📦 in GitLab? https://youtu.be/1AUKQ32K6D4 Session 7: What is Secret Detection 🤫? https://youtu.be/Qs28ONnj00s Session 8: Dynamic Application Security Testing (DAST) https://youtu.be/Jy1OiuPZrKs Session 9: What is Vulnerability Management 📝? https://youtu.be/XSrlVyv0H1c Session 10: How to do a Merge Request in GitLab https://youtu.be/h4AN7S2gwug Session 11: How to do a Schedule Pipeline in GitLab? https://youtu.be/PqPW3zQeP94 Session 12: Our Recommendations https://youtu.be/dphgw9xxjuw ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Software Testing https://youtube.com/playlist?list=PLrsbMazVPK_rwfoyN9CjxWEtNK-jsDNQW Extreme Programing https://www.youtube.com/playlist?list=PLrsbMazVPK_qyNeGfjb81feRc7jncUMp4 Business Process Management https://www.youtube.com/playlist?list=PLrsbMazVPK_ptz-P_BiGKTGaFg6cpN-l- #DevSecOps #DevOps #GitLab #RomanoRoth

How to do a Schedule Pipeline in GitLab 📅? Session 11: In this video, Padi and I will show you how to configure a Schedule Pipeline for our DevSecOps pipeline in GitLab so that the pipeline run at regular intervals. ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00 Welcome 00:09 Introduction 00:14 DevSecOps with GitLab 00:50 Are we secure with this pipeline? 01:27 Scheduled Pipeline for Production 02:06 Why are we not running all the jobs? 03:11 Which jobs to execute in the Scheduled Pipeline 03:53 Configuration of a Scheduled Pipeline 04:56 Setting up a new Scheduled Pipeline in GitLab 05:09 Summary ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ Source Code https://gitlab.com/romano_roth/gitlabdevsecopspipeline Blog-Post https://www.romanoroth.com/post/gitlab-vs-github-devsecops GitLab https://about.gitlab.com/ Patrick Steger https://www.linkedin.com/in/patrick-steger-ch/ Scheduled pipelines https://docs.gitlab.com/ee/ci/pipelines/schedules.html ▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬ Session 1: What is GitLab 🦊? | The fundamental concepts https://youtu.be/sHK8uN5fBhs Session 2: Introduction to GitLab 🦊 | Creating a simple project https://youtu.be/GQ3x9bkCK90 Session 3: What is Software Composition Analysis (SCA) 🧩 in GitLab? https://youtu.be/l69W5Ym_M5o Session 4: How to ensure License Compliance 📜 in GitLab? https://youtu.be/Kmbj_PCiHyk Session 5: How to do Static Application Security Testing (SAST) 🛡️ in GitLab? https://youtu.be/owwIMUamdDc Session 6: How to do Container Scanning 📦 in GitLab? https://youtu.be/1AUKQ32K6D4 Session 7: What is Secret Detection 🤫? https://youtu.be/Qs28ONnj00s Session 8: Dynamic Application Security Testing (DAST) https://youtu.be/Jy1OiuPZrKs Session 9: What is Vulnerability Management 📝? https://youtu.be/XSrlVyv0H1c Session 10: How to do a Merge Request in GitLab https://youtu.be/h4AN7S2gwug Session 11: How to do a Schedule Pipeline in GitLab? https://youtu.be/PqPW3zQeP94 Session 12: Our Recommendations https://youtu.be/dphgw9xxjuw ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Software Testing https://youtube.com/playlist?list=PLrsbMazVPK_rwfoyN9CjxWEtNK-jsDNQW Extreme Programing https://www.youtube.com/playlist?list=PLrsbMazVPK_qyNeGfjb81feRc7jncUMp4 Business Process Management https://www.youtube.com/playlist?list=PLrsbMazVPK_ptz-P_BiGKTGaFg6cpN-l- #DevSecOps #DevOps #GitLab #RomanoRoth

How to do a Merge Request 👩‍💻 in GitLab? Session 10: In this video, Padi and I will show you how to do a Merge Request (MR) to check the source code changes into a branch by using a DevSecOps pipeline build with GitLab. 𝐌𝐞𝐫𝐠𝐞 𝐫𝐞𝐪𝐮𝐞𝐬𝐭𝐬 (or pull requests) are a huge part of a team's development process. 𝐈𝐭'𝐬 𝐭𝐡𝐞 𝐦𝐚𝐢𝐧 𝐠𝐚𝐭𝐞𝐤𝐞𝐞𝐩𝐞𝐫 𝐩𝐫𝐞𝐯𝐞𝐧𝐭𝐢𝐧𝐠 𝐝𝐞𝐯𝐞𝐥𝐨𝐩𝐞𝐫𝐬 𝐟𝐫𝐨𝐦 𝐭𝐡𝐫𝐨𝐰𝐢𝐧𝐠 𝐰𝐡𝐚𝐭𝐞𝐯𝐞𝐫 𝐭𝐡𝐞𝐲 𝐰𝐚𝐧𝐭 𝐢𝐧𝐭𝐨 𝐭𝐡𝐞 𝐝𝐞𝐟𝐚𝐮𝐥𝐭 𝐛𝐫𝐚𝐧𝐜𝐡. ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00 Welcome 00:08 Introduction 00:21 DevSecOps with GitLab 00:39 Are we done with our pipeline? 01:23 What is Merge Request? 02:58 How does a Merge Request work? 04:34 Merge Requests in GitLab 05:02 Demo of a Merge Request in GitLab 07:07 Configuration of Merge Request behaviour 9:40 Summary ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ Source Code https://gitlab.com/romano_roth/gitlabdevsecopspipeline Blog-Post https://www.romanoroth.com/post/gitlab-vs-github-devsecops GitLab https://about.gitlab.com/ Patrick Steger https://www.linkedin.com/in/patrick-steger-ch/ Merge Request in GitLab https://docs.gitlab.com/ee/user/project/merge_requests/ ▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬ Session 1: What is GitLab 🦊? | The fundamental concepts https://youtu.be/sHK8uN5fBhs Session 2: Introduction to GitLab 🦊 | Creating a simple project https://youtu.be/GQ3x9bkCK90 Session 3: What is Software Composition Analysis (SCA) 🧩 in GitLab? https://youtu.be/l69W5Ym_M5o Session 4: How to ensure License Compliance 📜 in GitLab? https://youtu.be/Kmbj_PCiHyk Session 5: How to do Static Application Security Testing (SAST) 🛡️ in GitLab? https://youtu.be/owwIMUamdDc Session 6: How to do Container Scanning 📦 in GitLab? https://youtu.be/1AUKQ32K6D4 Session 7: What is Secret Detection 🤫? https://youtu.be/Qs28ONnj00s Session 8: Dynamic Application Security Testing (DAST) https://youtu.be/Jy1OiuPZrKs Session 9: What is Vulnerability Management 📝? https://youtu.be/XSrlVyv0H1c Session 10: How to do a Merge Request in GitLab https://youtu.be/h4AN7S2gwug Session 11: How to do a Schedule Pipeline in GitLab? https://youtu.be/PqPW3zQeP94 Session 12: Our Recommendations https://youtu.be/dphgw9xxjuw ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Software Testing https://youtube.com/playlist?list=PLrsbMazVPK_rwfoyN9CjxWEtNK-jsDNQW Extreme Programing https://www.youtube.com/playlist?list=PLrsbMazVPK_qyNeGfjb81feRc7jncUMp4 Business Process Management https://www.youtube.com/playlist?list=PLrsbMazVPK_ptz-P_BiGKTGaFg6cpN-l- #DevSecOps #DevOps #GitLab #RomanoRoth

Recording of the Swiss Re TEC Conference 2022 talk about: DevOps – Thinking in Systems & Value Streams In today's world, everybody wants to do DevOps. But why? What problems are we trying to solve? Together we will take a step back and look at how you can architect for continuous delivery. ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00 Intro 00:16 About me 01:38 What are today's challenges 02:54 Where do these challenges come from? 03:31 It's about products! 03:39 What does that mean? 04:24 What is DevOps? 04:56 Who is DevOps? 05:52 DevOps 06:05 Why is this important for you? 06:42 Example? 08:46 Product Development 10:22 But how do we get from projects to products? 10:28 Apply whole system thinking 10:33 Identify bottlenecks in your development process 12:39 Build a Continuous Delivery Pipeline 12:46 Continuous integration (CI) 13:49 Continuous delivery (CD) 14:18 Continuous deployment (CD) 15:01 Example of a CI/CD Pipeline 15:15 Example of a Continuous Delivery Pipeline 15:55 Built-in quality 16:01 Test fast for continuous feedback 17:38 The right balance of tests 18:33 Continuous Testing 19:25 Build for operability 19:46 You build it you run it! 21:26 We need to architect for operability 23:01 Summary 24:38 Discussion ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ Swiss Re: https://www.swissre.com/ ▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬ What is DevOps? https://youtu.be/72RDgbVve68 Who is DevOps? https://youtu.be/ZKlSNpT0h-4 How can we improve value streams? https://youtu.be/oThy-JNwecc Why to create value faster? https://youtu.be/k89T-SVk6cE What is Continuous Integration 🧩? https://youtu.be/yWIvffpfUAo What is Continuous Deployment 🚚? https://youtu.be/y8VndBYPWgM What is the difference between traditional testing and agile testing? https://youtu.be/giwMXwT6BrY What is the difference between the traditional test pyramid and the agile test pyramid? https://youtu.be/ktQOrCYSE1E What is Respond 🚨? | SAFe DevOps Health Radar https://youtu.be/EfLLfdAWQsQ What is Stabilize ⚖️? | SAFe DevOps Health Radar https://youtu.be/XSO02OK92vE ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Software Testing https://youtube.com/playlist?list=PLrsbMazVPK_rwfoyN9CjxWEtNK-jsDNQW Extreme Programing https://www.youtube.com/playlist?list=PLrsbMazVPK_qyNeGfjb81feRc7jncUMp4 Business Process Management https://www.youtube.com/playlist?list=PLrsbMazVPK_ptz-P_BiGKTGaFg6cpN-l- #DevSecOps #DevOps #GitLab #RomanoRoth

How to do Vulnerability Management 📝 in GitLab? Session 9: In this video, Padi and I will show you how to manage and track the vulnerabilities with GitLab Vulnerability Management. Vulnerability Management is the recurring process of identifying, classifying, prioritizing, mitigating, and remediating vulnerabilities ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00 Welcome 00:09 Intro 00:14 DevSecOps with GitLab 02:45 What is Vulnerability Management 04:22 Capabilities 06:03 Limitations 09:03 Vulnerability Management in GitLab 09:16 Vulnerability Report 09:59 Filtering 10:42 Details of a finding 11:23 Link to the code 11:41 Security dashboard 12:17 How to manually add vulnerability findings 15:15 Create an issue for a finding 17:02 The status of vulnerability findings 17:37 Confirm vulnerability findings 18:00 Dismiss vulnerability findings 18:39 Fix issues 20:26 Pipeline results 20:53 Vulnerability Report with fixed issues 21:08 No longer detected 22:27 Set status to fixed 24:17 Summary ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ Source Code https://gitlab.com/romano_roth/gitlabdevsecopspipeline Blog-Post https://www.romanoroth.com/post/gitlab-vs-github-devsecops GitLab https://about.gitlab.com/ Patrick Steger https://www.linkedin.com/in/patrick-steger-ch/ Vulnerability Management in GitLab https://about.gitlab.com/handbook/engineering/security/threat-management/vulnerability-management/ ▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬ Session 1: What is GitLab 🦊? | The fundamental concepts https://youtu.be/sHK8uN5fBhs Session 2: Introduction to GitLab 🦊 | Creating a simple project https://youtu.be/GQ3x9bkCK90 Session 3: What is Software Composition Analysis (SCA) 🧩 in GitLab? https://youtu.be/l69W5Ym_M5o Session 4: How to ensure License Compliance 📜 in GitLab? https://youtu.be/Kmbj_PCiHyk Session 5: How to do Static Application Security Testing (SAST) 🛡️ in GitLab? https://youtu.be/owwIMUamdDc Session 6: How to do Container Scanning 📦 in GitLab? https://youtu.be/1AUKQ32K6D4 Session 7: What is Secret Detection 🤫? https://youtu.be/Qs28ONnj00s Session 8: Dynamic Application Security Testing (DAST) https://youtu.be/Jy1OiuPZrKs Session 9: What is Vulnerability Management 📝? https://youtu.be/XSrlVyv0H1c Session 10: How to do a Merge Request in GitLab https://youtu.be/h4AN7S2gwug Session 11: How to do a Schedule Pipeline in GitLab? https://youtu.be/PqPW3zQeP94 Session 12: Our Recommendations https://youtu.be/dphgw9xxjuw ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Software Testing https://youtube.com/playlist?list=PLrsbMazVPK_rwfoyN9CjxWEtNK-jsDNQW Extreme Programing https://www.youtube.com/playlist?list=PLrsbMazVPK_qyNeGfjb81feRc7jncUMp4 Business Process Management https://www.youtube.com/playlist?list=PLrsbMazVPK_ptz-P_BiGKTGaFg6cpN-l- #DevSecOps #DevOps #GitLab #RomanoRoth

What is Dynamic Application Security Testing (DAST) 🏃? Session 8: In this video, Padi and I will show you how to find vulnerabilities in your running application using Dynamic Application Security Testing (DAST) in GitLab. ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00 Welcome 00:07 Intro 00:21 DevSecOps with GitLab 01:40 What is DAST? 02:48 DAST- Prerequisites: Define Stage 04:00 DAST- Prerequisites: Container Image 04:52: DAST- Prerequisites: Configuration 05:43: How to enable DAST 05:52 How to enable DAST in GitLab 07:21 Quick recap 08:26 Pipeline results 08:38 dast job results 09:54 Security tab 10:38 Vulnerability report 10:59 Summary ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ Source Code https://gitlab.com/romano_roth/gitlabdevsecopspipeline Blog-Post https://www.romanoroth.com/post/gitlab-vs-github-devsecops GitLab https://about.gitlab.com/ Patrick Steger https://www.linkedin.com/in/patrick-steger-ch/ Dynamic Application Security Testing (DAST) in GitLab https://docs.gitlab.com/ee/user/application_security/dast/ ▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬ Session 1: What is GitLab 🦊? | The fundamental concepts https://youtu.be/sHK8uN5fBhs Session 2: Introduction to GitLab 🦊 | Creating a simple project https://youtu.be/GQ3x9bkCK90 Session 3: What is Software Composition Analysis (SCA) 🧩 in GitLab? https://youtu.be/l69W5Ym_M5o Session 4: How to ensure License Compliance 📜 in GitLab? https://youtu.be/Kmbj_PCiHyk Session 5: How to do Static Application Security Testing (SAST) 🛡️ in GitLab? https://youtu.be/owwIMUamdDc Session 6: How to do Container Scanning 📦 in GitLab? https://youtu.be/1AUKQ32K6D4 Session 7: What is Secret Detection 🤫? https://youtu.be/Qs28ONnj00s Session 8: Dynamic Application Security Testing (DAST) https://youtu.be/Jy1OiuPZrKs Session 9: What is Vulnerability Management 📝? https://youtu.be/XSrlVyv0H1c Session 10: How to do a Merge Request in GitLab https://youtu.be/h4AN7S2gwug Session 11: How to do a Schedule Pipeline in GitLab? https://youtu.be/PqPW3zQeP94 Session 12: Our Recommendations https://youtu.be/dphgw9xxjuw ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Software Testing https://youtube.com/playlist?list=PLrsbMazVPK_rwfoyN9CjxWEtNK-jsDNQW Extreme Programing https://www.youtube.com/playlist?list=PLrsbMazVPK_qyNeGfjb81feRc7jncUMp4 Business Process Management https://www.youtube.com/playlist?list=PLrsbMazVPK_ptz-P_BiGKTGaFg6cpN-l- #DevSecOps #DevOps #GitLab #RomanoRoth

What is Secret Detection 🤫? Session 7: In this video, Padi and I will show you how to find secrets in your own code or configuration files with GitLab. Sorry for the not optimal sound and video quality 😓. both are fixed in the upcoming videos. ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00 Welcome 00:14 Intro 00:19 DevSecOps with GitLab 01:21 What is Secret Detection 03:16 How to enable Secret Detection 03:40 How to enable Secret Detection in GitLab 04:25 Pipeline results 04:45 secret_detection job results 04:57 No leaks found 06:07 Pattern matching gitleaks.toml 07:07 Are we lost? 07:39 SAST for the rescue 09:00 Let's add a key that can be found by secret detention 10:12 Pipeline results 10:23 secret_detection job results 10:57 Security tab 11:28 Vulnerability report 12:06 Discussion about the results 13:49 Summary ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ Source Code https://gitlab.com/romano_roth/gitlabdevsecopspipeline Blog-Post https://www.romanoroth.com/post/gitlab-vs-github-devsecops GitLab https://about.gitlab.com/ Patrick Steger https://www.linkedin.com/in/patrick-steger-ch/ Secret Detection https://docs.gitlab.com/ee/user/application_security/secret_detection/ Pattern matching https://github.com/zricethezav/gronit/blob/master/.gitleaks.toml ▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬ Session 1: What is GitLab 🦊? | The fundamental concepts https://youtu.be/sHK8uN5fBhs Session 2: Introduction to GitLab 🦊 | Creating a simple project https://youtu.be/GQ3x9bkCK90 Session 3: What is Software Composition Analysis (SCA) 🧩 in GitLab? https://youtu.be/l69W5Ym_M5o Session 4: How to ensure License Compliance 📜 in GitLab? https://youtu.be/Kmbj_PCiHyk Session 5: How to do Static Application Security Testing (SAST) 🛡️ in GitLab? https://youtu.be/owwIMUamdDc Session 6: How to do Container Scanning 📦 in GitLab? https://youtu.be/1AUKQ32K6D4 Session 7: What is Secret Detection 🤫? https://youtu.be/Qs28ONnj00s Session 8: Dynamic Application Security Testing (DAST) https://youtu.be/Jy1OiuPZrKs Session 9: What is Vulnerability Management 📝? https://youtu.be/XSrlVyv0H1c Session 10: How to do a Merge Request in GitLab https://youtu.be/h4AN7S2gwug Session 11: How to do a Schedule Pipeline in GitLab? https://youtu.be/PqPW3zQeP94 Session 12: Our Recommendations https://youtu.be/dphgw9xxjuw ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Software Testing https://youtube.com/playlist?list=PLrsbMazVPK_rwfoyN9CjxWEtNK-jsDNQW Extreme Programing https://www.youtube.com/playlist?list=PLrsbMazVPK_qyNeGfjb81feRc7jncUMp4 Business Process Management https://www.youtube.com/playlist?list=PLrsbMazVPK_ptz-P_BiGKTGaFg6cpN-l- #DevSecOps #DevOps #GitLab #RomanoRoth

I'm a huge fan of our new office. Join me in 🏃‍♀️ walking through our new amazing Zühlke Office in Zürcherstrasse 39J, 8952 Schlieren in 4k and 360 VR. Do you want to see more of my 4K 360 VR videos? Then check out my new YouTube Channel: 👉https://www.youtube.com/channel/UCfNGdLOxjT-rLxSEpW8jdMQ/videos ▬▬▬▬▬▬ V R 🥽 ▬▬▬▬▬▬ Best viewed in a VR Headset (like Meta Quest 2) + headphones 🎧 for an immersive experience you will never forget! (use YouTube VR App, set resolution to 2160s or 4K on desktop) 🥽Watch directly on Oculus TV: https://www.oculus.com/experiences/media/388803716598901/ 🎓How to watch 360° video: If you are on your phone, make sure to set the resolution to 2160s: click the vertical 3 dots on the top right corner - select Quality - select Advanced - pick 2160s. Use your Wifi for better streaming quality. ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ 3D tour through the office: https://my.matterport.com/show/?m=4ToAZVJbBTE ▬▬▬▬▬▬ S O U N D 🔊▬▬▬▬▬▬ End Of The Abyss by Aliaksei Yukhnevich: https://tunetank.com/track/jd/end-of-the-abyss/ The Time by MusicArea: https://tunetank.com/track/3935-the-time/ Vortex by Rage Sound: https://tunetank.com/track/3955-vortex/ ▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬ Zühlke Switzerland: https://www.zuehlke.com/de/karriere/willkommen-bei-zuehlke-schweiz ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Software Testing https://youtube.com/playlist?list=PLrsbMazVPK_rwfoyN9CjxWEtNK-jsDNQW Extreme Programing https://www.youtube.com/playlist?list=PLrsbMazVPK_qyNeGfjb81feRc7jncUMp4 Business Process Management https://www.youtube.com/playlist?list=PLrsbMazVPK_ptz-P_BiGKTGaFg6cpN-l- #RomanoRoth #Scrum #Agile #Lean6 #Webinar #DevCoding #CodingExpertxpert

How to do Container Scanning 📦 in GitLab? Session 6: In this video, Padi and I will show you how to find vulnerabilities in your container images with GitLab. ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00 Welcome 00:12 Intro 00:17 DevSecOps with GitLab 01:03 What is container scanning? 02:24 How to enable Container Scanning in GitLab 03:02 How to create the docker image 03:51 How to push the container image to the registry 05:15 How to use Docker in Docker (dind) 05:41 Make the image name available in the container scan job 06:14 Demo 06:42 Change the docker image 07:35 Enable Container Scanning in GitLab 08:49 Add the build image job 11:01 Recap 11:57 Pipeline results 12:09 container_scanning job results 12:23 Discussion why the pipeline is not failing 15:12 Security tab 15:45 Vulnerability report 16:06 Summary ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ Source Code https://gitlab.com/romano_roth/gitlabdevsecopspipeline Blog-Post https://www.romanoroth.com/post/gitlab-vs-github-devsecops GitLab https://about.gitlab.com/ Patrick Steger https://www.linkedin.com/in/patrick-steger-ch/ Container Scanning in GitLab https://docs.gitlab.com/ee/user/application_security/container_scanning/ ▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬ Session 1: What is GitLab 🦊? | The fundamental concepts https://youtu.be/sHK8uN5fBhs Session 2: Introduction to GitLab 🦊 | Creating a simple project https://youtu.be/GQ3x9bkCK90 Session 3: What is Software Composition Analysis (SCA) 🧩 in GitLab? https://youtu.be/l69W5Ym_M5o Session 4: How to ensure License Compliance 📜 in GitLab? https://youtu.be/Kmbj_PCiHyk Session 5: How to do Static Application Security Testing (SAST) 🛡️ in GitLab? https://youtu.be/owwIMUamdDc Session 6: How to do Container Scanning 📦 in GitLab? https://youtu.be/1AUKQ32K6D4 Session 7: What is Secret Detection 🤫? https://youtu.be/Qs28ONnj00s Session 8: Dynamic Application Security Testing (DAST) https://youtu.be/Jy1OiuPZrKs Session 9: What is Vulnerability Management 📝? https://youtu.be/XSrlVyv0H1c Session 10: How to do a Merge Request in GitLab https://youtu.be/h4AN7S2gwug Session 11: How to do a Schedule Pipeline in GitLab? https://youtu.be/PqPW3zQeP94 Session 12: Our Recommendations https://youtu.be/dphgw9xxjuw ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Software Testing https://youtube.com/playlist?list=PLrsbMazVPK_rwfoyN9CjxWEtNK-jsDNQW Extreme Programing https://www.youtube.com/playlist?list=PLrsbMazVPK_qyNeGfjb81feRc7jncUMp4 Business Process Management https://www.youtube.com/playlist?list=PLrsbMazVPK_ptz-P_BiGKTGaFg6cpN-l- #DevSecOps #DevOps #GitLab #RomanoRoth

How to do Static Application Security Testing (SAST) 🛡️ in GitLab and to succeed with this critical security configuration. Session 5: In this video, Padi and I will show you how to find vulnerabilities in your code using Static Application Security Testing (SAST) in GitLab. ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00 Welcome 00:07 Intro 00:14 How to do Static Application Security Testing (SAST) 🛡️ in GitLab? 00:31 DevSecOps with GitLab 01:20 What is SAST? 02:25 How to enable SAST in GitLab? 02:45 Demo project 04:05 Enable SAST in GitLab 05:05 SAST.gitlab-ci.yaml 06:05 Pipeline results 06:36 Results of the semgrep-sast job 07:25 Security tab 08:29 Vulnerability report 09:04 Summary ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ Source Code https://gitlab.com/romano_roth/gitlabdevsecopspipeline Blog-Post https://www.romanoroth.com/post/gitlab-vs-github-devsecops GitLab https://about.gitlab.com/ Patrick Steger https://www.linkedin.com/in/patrick-steger-ch/ Static Application Security Testing (SAST) in GitLab https://docs.gitlab.com/ee/user/application_security/sast/ ▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬ Session 1: What is GitLab 🦊? | The fundamental concepts https://youtu.be/sHK8uN5fBhs Session 2: Introduction to GitLab 🦊 | Creating a simple project https://youtu.be/GQ3x9bkCK90 Session 3: What is Software Composition Analysis (SCA) 🧩 in GitLab? https://youtu.be/l69W5Ym_M5o Session 4: How to ensure License Compliance 📜 in GitLab? https://youtu.be/Kmbj_PCiHyk Session 5: How to do Static Application Security Testing (SAST) 🛡️ in GitLab? https://youtu.be/owwIMUamdDc Session 6: How to do Container Scanning 📦 in GitLab? https://youtu.be/1AUKQ32K6D4 Session 7: What is Secret Detection 🤫? https://youtu.be/Qs28ONnj00s Session 8: Dynamic Application Security Testing (DAST) https://youtu.be/Jy1OiuPZrKs Session 9: What is Vulnerability Management 📝? https://youtu.be/XSrlVyv0H1c Session 10: How to do a Merge Request in GitLab https://youtu.be/h4AN7S2gwug Session 11: How to do a Schedule Pipeline in GitLab? https://youtu.be/PqPW3zQeP94 Session 12: Our Recommendations https://youtu.be/dphgw9xxjuw ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Software Testing https://youtube.com/playlist?list=PLrsbMazVPK_rwfoyN9CjxWEtNK-jsDNQW Extreme Programing https://www.youtube.com/playlist?list=PLrsbMazVPK_qyNeGfjb81feRc7jncUMp4 Business Process Management https://www.youtube.com/playlist?list=PLrsbMazVPK_ptz-P_BiGKTGaFg6cpN-l- #DevSecOps #DevOps #GitLab #RomanoRoth

How to ensure License Compliance 📜 in GitLab? Session 4: In this video, Padi and I will show you in GitLab how you can manage what licences are acceptable for your project and what licences are already used. ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00 How do you ensure License Compliance in GitLab? 00:11 Overview 00:20 What is License Compliance? 01:28 Why need to check licenses? 02:21 How to enable license Compliances in Gitlab? 02:54 Demo project. 06:15 Where to find the results? 06:45 How to configure which licenses are allowed? 09:30 License Compliance summary 09:56 Outro ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ Source Code https://gitlab.com/romano_roth/gitlabdevsecopspipeline Blog-Post https://www.romanoroth.com/post/gitlab-vs-github-devsecops GitLab https://about.gitlab.com/ Patrick Steger https://www.linkedin.com/in/patrick-steger-ch/ License compliance in GitLab https://docs.gitlab.com/ee/user/compliance/license_compliance/ ▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬ Session 1: What is GitLab 🦊? | The fundamental concepts https://youtu.be/sHK8uN5fBhs Session 2: Introduction to GitLab 🦊 | Creating a simple project https://youtu.be/GQ3x9bkCK90 Session 3: What is Software Composition Analysis (SCA) 🧩 in GitLab? https://youtu.be/l69W5Ym_M5o Session 4: How to ensure License Compliance 📜 in GitLab? https://youtu.be/Kmbj_PCiHyk Session 5: How to do Static Application Security Testing (SAST) 🛡️ in GitLab? https://youtu.be/owwIMUamdDc Session 6: How to do Container Scanning 📦 in GitLab? https://youtu.be/1AUKQ32K6D4 Session 7: What is Secret Detection 🤫? https://youtu.be/Qs28ONnj00s Session 8: Dynamic Application Security Testing (DAST) https://youtu.be/Jy1OiuPZrKs Session 9: What is Vulnerability Management 📝? https://youtu.be/XSrlVyv0H1c Session 10: How to do a Merge Request in GitLab https://youtu.be/h4AN7S2gwug Session 11: How to do a Schedule Pipeline in GitLab? https://youtu.be/PqPW3zQeP94 Session 12: Our Recommendations https://youtu.be/dphgw9xxjuw ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Software Testing https://youtube.com/playlist?list=PLrsbMazVPK_rwfoyN9CjxWEtNK-jsDNQW Extreme Programing https://www.youtube.com/playlist?list=PLrsbMazVPK_qyNeGfjb81feRc7jncUMp4 Business Process Management https://www.youtube.com/playlist?list=PLrsbMazVPK_ptz-P_BiGKTGaFg6cpN-l- #DevSecOps #DevOps #GitLab #RomanoRoth

What is Software Composition Analysis (SCA) 🧩 in GitLab? Session 3: In this video, Padi and I will show you how to find vulnerabilities in dependencies in your code by using Software Composition Analysis (SCA) or Dependency Scanning. ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00 What is SCA? 00:18 Intro 01:17 Demo project 02:44 Creating the Pipeline file 05:57 Software Composition Analysis 08:37 Examples 08:59 Enabling Software Composition Analysis 10:30 Newest pipeline run 11:37 Where the results are stored 14:04 Summary ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ Source Code https://gitlab.com/romano_roth/gitlabdevsecopspipeline Blog-Post https://www.romanoroth.com/post/gitlab-vs-github-devsecops GitLab https://about.gitlab.com/ Patrick Steger https://www.linkedin.com/in/patrick-steger-ch/ Dependency Scanning in GitLab https://docs.gitlab.com/ee/user/application_security/dependency_scanning/ ▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬ Session 1: What is GitLab 🦊? | The fundamental concepts https://youtu.be/sHK8uN5fBhs Session 2: Introduction to GitLab 🦊 | Creating a simple project https://youtu.be/GQ3x9bkCK90 Session 3: What is Software Composition Analysis (SCA) 🧩 in GitLab? https://youtu.be/l69W5Ym_M5o Session 4: How to ensure License Compliance 📜 in GitLab? https://youtu.be/Kmbj_PCiHyk Session 5: How to do Static Application Security Testing (SAST) 🛡️ in GitLab? https://youtu.be/owwIMUamdDc Session 6: How to do Container Scanning 📦 in GitLab? https://youtu.be/1AUKQ32K6D4 Session 7: What is Secret Detection 🤫? https://youtu.be/Qs28ONnj00s Session 8: Dynamic Application Security Testing (DAST) https://youtu.be/Jy1OiuPZrKs Session 9: What is Vulnerability Management 📝? https://youtu.be/XSrlVyv0H1c Session 10: How to do a Merge Request in GitLab https://youtu.be/h4AN7S2gwug Session 11: How to do a Schedule Pipeline in GitLab? https://youtu.be/PqPW3zQeP94 Session 12: Our Recommendations https://youtu.be/dphgw9xxjuw ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Software Testing https://youtube.com/playlist?list=PLrsbMazVPK_rwfoyN9CjxWEtNK-jsDNQW Extreme Programing https://www.youtube.com/playlist?list=PLrsbMazVPK_qyNeGfjb81feRc7jncUMp4 Business Process Management https://www.youtube.com/playlist?list=PLrsbMazVPK_ptz-P_BiGKTGaFg6cpN-l- #DevSecOps #DevOps #GitLab #RomanoRoth

Introduction to GitLab 🦊 | Creating a simple project Session 2: In this video, Padi and I will create a simple C# project in GitLab to demonstrate how to create a simple pipeline. ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00 Intro 00:20 Login page 01:30 Create a new project 02:04 Project templates 03:52 .gitlab-ci.yml 04:57 What does Gitlab do with the .gitlab-ci.yml file? 06:22 Deep dive 07:04 Important notes 08:40 Two things to take note 09:18 Second Job 10:39 Outro ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ Source Code https://gitlab.com/romano_roth/gitlabdevsecopspipeline Blog-Post https://www.romanoroth.com/post/gitlab-vs-github-devsecops GitLab https://about.gitlab.com/ Patrick Steger https://www.linkedin.com/in/patrick-steger-ch/ ▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬ Session 1: What is GitLab 🦊? | The fundamental concepts https://youtu.be/sHK8uN5fBhs Session 2: Introduction to GitLab 🦊 | Creating a simple project https://youtu.be/GQ3x9bkCK90 Session 3: What is Software Composition Analysis (SCA) 🧩 in GitLab? https://youtu.be/l69W5Ym_M5o Session 4: How to ensure License Compliance 📜 in GitLab? https://youtu.be/Kmbj_PCiHyk Session 5: How to do Static Application Security Testing (SAST) 🛡️ in GitLab? https://youtu.be/owwIMUamdDc Session 6: How to do Container Scanning 📦 in GitLab? https://youtu.be/1AUKQ32K6D4 Session 7: What is Secret Detection 🤫? https://youtu.be/Qs28ONnj00s Session 8: Dynamic Application Security Testing (DAST) https://youtu.be/Jy1OiuPZrKs Session 9: What is Vulnerability Management 📝? https://youtu.be/XSrlVyv0H1c Session 10: How to do a Merge Request in GitLab https://youtu.be/h4AN7S2gwug Session 11: How to do a Schedule Pipeline in GitLab? https://youtu.be/PqPW3zQeP94 Session 12: Our Recommendations https://youtu.be/dphgw9xxjuw ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Software Testing https://youtube.com/playlist?list=PLrsbMazVPK_rwfoyN9CjxWEtNK-jsDNQW Extreme Programing https://www.youtube.com/playlist?list=PLrsbMazVPK_qyNeGfjb81feRc7jncUMp4 Business Process Management https://www.youtube.com/playlist?list=PLrsbMazVPK_ptz-P_BiGKTGaFg6cpN-l- #DevSecOps #DevOps #GitLab #RomanoRoth