DevOps and Docker Talk: Cloud Native Interviews and Tooling

Aikido: Is a Single DevSecOps Tool Possible?


Listen Later

Or watch the video version on YouTube. Bret is joined by Willem Delbare and Roeland Delrue to discuss Aikido, a security tool consolidation platform designed specifically for smaller teams and solo DevOps practitioners.

😇 My new GitHub Security workshop has launched! A free 2-hour workshop with hands-on labs to harden your repos and your workflows from common supply chain attacks. I'll cover how attackers are getting in, and then we'll lock down a sample repo so you know what needs to be done to protect your code. You'll leave with a deep understanding of risks and mitigations as well as a list of helpful tools to keep your repos safe, including my new "gasa" tool for scanning your repos and orgs.

The discussion explores how Aikido addresses the growing challenges of software supply chain security by bringing together various security tools - from CVE scanning to cloud API analysis - under a single, manageable portal. Unlike enterprise-focused solutions, Aikido targets the needs of smaller teams and individual DevOps engineers who often juggle multiple responsibilities. During the episode, they demonstrate Aikido's capabilities using Bret's sample GitHub organization, and show how teams can implement comprehensive security measures without managing multiple separate tools.

There's also a video version on YouTube.

★Topics★
Aikido website
Aikido on Bluesky
Aikido on LinkedIn

Creators & Guests

  • Cristi Cotovan - Editor
  • Beth Fisher - Producer
  • Bret Fisher - Host
  • Willem Delbare - Guest
  • Roeland Delrue - Guest
    • (00:00) - Intro
  • (06:20) - Aikido Origin Story
  • (10:32) - What Does AutoFix Mean?
  • (13:18) - Security Automation and Developers
  • (21:32) - Lessons from Onboarding Customers
  • (23:10) - Reducing Noise and Alert Fatigue with Aikido
  • (27:30) - Aikido in the CI/CD Process
  • (31:26) - AI Security Integration
  • (32:24) - GitHub Actions and Dependencies as Attack Vector
  • (39:20) - Dependencies in Programming Languages
  • (41:30) - Infrastructure as Code and Cloud Security
  • (48:17) - Runtime Protection with Aikido Zen
  • (54:25) - Agent Involvement in Scanning
  • (57:54) - Tools to Use Alongside Aikido
  • (01:01:16) - Getting Started with Aikido

  • You can also support this podcast by subscribing to my YouTube channel and my monthly newsletter at bret.news!

    Grab the best coupons for my GitHub, Agents, Docker, and Kubernetes courses.
    Join my cloud native DevOps community on Discord.
    Grab some merch at Bret's Loot Box
    Homepage bretfisher.com

    ...more
    View all episodesView all episodes
    Download on the App Store

    DevOps and Docker Talk: Cloud Native Interviews and ToolingBy Bret Fisher

    • 4.6
    • 4.6
    • 4.6
    • 4.6
    • 4.6

    4.6

    54 ratings


    More shows like DevOps and Docker Talk: Cloud Native Interviews and Tooling

    View all
    The Joe Rogan Experience by Joe Rogan

    The Joe Rogan Experience

    228,383 Listeners

    All Ears English Podcast by Lindsay McMahon and Michelle Kaplan

    All Ears English Podcast

    2,237 Listeners

    The Daily by The New York Times

    The Daily

    111,948 Listeners

    Agentic DevOps : AI Engineering for Infrastructure by Bret Fisher

    Agentic DevOps : AI Engineering for Infrastructure

    2 Listeners