4 ms·
With apologies for being off topic: "DevSecOps" is so transparently marketing FUD generated by consultants trying to sell hours to enterprises that I wince ever
by seneca 6y ago
With apologies for being off topic: "DevSecOps" is so transparently marketing FUD generated by consultants trying to sell hours to enterprises that I wince every time I read the phrase. Why is this industry so packed with vapid buzzwords like this?
- freedomben 6y agoI agree that they are buzzwords but I don't think "it's transparently marketing." necessarily. What would you call the process of trying to integrate security testing/scanning/auditing/other workflows into a devops-oriented CI/CD process in an automated way? Our industry is loaded with buzzwords that are used liberally and often needlessly by "thought leaders," but that doesn't mean they are useless. It just means that those people latch on to ideas and trumpet them.
- staticassertion 6y agoSo, I really dislike the word, and I would love it if the industry would ditch it because it sounds so dumb... but also, I 100% support the DevSecOps manifesto[0]. Security being extremely manual, extremely 'tool' driven, being policy based, being dictatorial, is awful and not working. We do need the industry to shift towards leveraging code, APIs, working with other teams, building alongside developers, etc. And that's all DevSecOps is really saying. Again, wish we could all just ditch the term, but I honestly think it's here to stay and we need to look past the marketing bullshit to see what's in front of us. [0] https://www.devsecops.org/ https://www.devsecops.org/