DSO Overflow

DSO Overflow S3EP8

Static Application Security Testing
with
Nipun Gupta

In this episode, Glenn is joined by Nipun Gupta, a seasoned technology executive, entrepreneur, and speaker to talk about static code analysis, its benefits, its pitfalls and how best to integrate tools into developer workflows.  Based nowadays in London, UK after a decade in Silicon Valley, Nipun has developed a reputation as a thought leader and innovator in cybersecurity at places like NCC Group, Deutsche Bank, and Deloitte. Prior to leading Integrations Product at Devo, he served as the Vice President, Global Cyber Security Strategy & Innovation Lead at Deutsche Bank’s Silicon Valley office. Currently serving as the COO at Bearer, a fast-growing static code analysis platform that is redefining what code security can do, Nipun is at the forefront of the DevSecOps revolution, helping companies of all sizes adopt modern approaches to software development and security.

Resources mentioned in this podcast:

• Nipun's LinkedIn profile
• Nipun's Twitter Feed
• Bearer CLI documentation
• Bearer on GitHub
• Bearer on Twitter

DSO Overflow is a DevSecOps London Gathering production. Find the audio version on all good podcast sources like Spotify, Apple Podcast and Buzzsprout.

This podcast is brought to you by our sponsors:  Prisma Cloud,, Apiiro, and Sysdig

Your Hosts
Steve Giguere linkedin.com/in/stevegiguere
Glenn Wilson linkedin.com/in/glennwilson
Jessica Cregg linkedin.com/in/jessicacregg

DevSecOps - London Gathering
Keep in touch with our events associated with this podcast via our website.
For more about DevSecOps - London Gathering check out https://dsolg.com

DSO Overflow S3EP7

Open Source Cloud Security
with
Matt Johnson

In this episode, Steve, Jess and I are joined by Matt Johnson, developer advocate at Palo Alto Networks to talk to us about open source cloud security. Matt is a Developer Advocate for all things cloud security and open source at Prisma Cloud (part of Palo Alto). Hobbyist pentester, network and container geek, he specialises in Cloud Infrastructure and developer ecosystem security. Matt introduces us to the Checkov and Yor open source projects and talks about how AI may affect cloud security in the future.

Resources mentioned in this podcast:

• Matt's LinkedIn profile
• Checkov
• Yor
• CICD Goat on GitHub
• Kubernetes Goat on GitHub

DSO Overflow is a DevSecOps London Gathering production. Find the audio version on all good podcast sources like Spotify, Apple Podcast and Buzzsprout.

This podcast is brought to you by our sponsors:  Prisma Cloud,, Apiiro, and Sysdig

Your Hosts
Steve Giguere linkedin.com/in/stevegiguere
Glenn Wilson linkedin.com/in/glennwilson
Jessica Cregg linkedin.com/in/jessicacregg

DevSecOps - London Gathering
Keep in touch with our events associated with this podcast via our website.
For more about DevSecOps - London Gathering check out https://dsolg.com

DSO Overflow S3EP6

Notes from Japan
with
John Willis

In this episode, Glenn is joined by John Willis, DevOps advocate and co-author of the DevOps Handbook to talk about our recent trip to Japan in which we visited a number of organisations to gain an understanding of lean principles. Listen to John as he shares his views of the trip and what he learned about quality, community, society and of course, Deming.

Resources mentioned in this podcast:

• John's LinkedIn profile
• John's Profound Deming blog
• John's lates book on Deming
• The DevOps Handbook

DSO Overflow is a DevSecOps London Gathering production. Find the audio version on all good podcast sources like Spotify, Apple Podcast and Buzzsprout.

This podcast is brought to you by our sponsors:  Prisma Cloud, Apiiro, and Sysdig

Your Hosts
Steve Giguere linkedin.com/in/stevegiguere
Glenn Wilson linkedin.com/in/glennwilson
Jessica Cregg linkedin.com/in/jessicacregg

DevSecOps - London Gathering
Keep in touch with our events associated with this podcast via our website.
For more about DevSecOps - London Gathering check out https://dsolg.com

DSO Overflow S3EP5

Workload authentication and authorisation using SPIFEE and OPA
with
Charlie Egain

In this episode, Steve, Jess and I are joined by Charlie Egan, developer advocate and Styra to talks to us about using SPIFFE (Secure Production Identity Framework For Everyone) and OPA (Open Policy Agent) to authenticate and authorise workloads. Charlie explains what SPIFFE is, how to start using it, and the challenges it helps organisations overcome.

Resources mentioned in this podcast:

• Charlie's LinkedIn profile
• SPIFFE
• OPA
• DSO Overflow S1Ep7 on Open Policy Agent

DSO Overflow is a DevSecOps London Gathering production. Find the audio version on all good podcast sources like Spotify, Apple Podcast and Buzzsprout.

This podcast is brought to you by our sponsors:  Prisma Cloud,, Apiiro, and Sysdig

Your Hosts
Steve Giguere linkedin.com/in/stevegiguere
Glenn Wilson linkedin.com/in/glennwilson
Jessica Cregg linkedin.com/in/jessicacregg

DevSecOps - London Gathering
Keep in touch with our events associated with this podcast via our website.
For more about DevSecOps - London Gathering check out https://dsolg.com

In this episode, Steve, Jess and Glenn met with Michael Man, the founder of the DevSecOps London Gathering and this podcast, to chat about how it all started and the principles and philosophy of the Gathering. We reminisce about some key moments as well as discussing Michael's decision to step down from running the events and the podcast.

We hope you enjoy listening to this episode as much as we enjoyed recording it.

DSO Overflow is a DevSecOps London Gathering production. Find the audio version on all good podcast sources like Spotify, Apple Podcast and Buzzsprout.

• Michael's LinkedIn Profile

This podcast is brought to you by our sponsors:  Prisma Cloud,, and Sysdig

Your Hosts
Steve Giguere linkedin.com/in/stevegiguere
Glenn Wilson linkedin.com/in/glennwilson
Jessica Cregg linkedin.com/in/jessicacregg

DevSecOps - London Gathering
Keep in touch with our events associated with this podcast via our website.
For more about DevSecOps - London Gathering check out https://dsolg.com

DSO Overflow S3EP3

Leveraging Systems Thinking
with
Simon Copley

In this episode, Steve, Jess and I are joined by Simon Copsey who talks to us about taking a systems thinking approach to improving organisational performance. He tells us among other things, about challenging assumptions, identifying, understanding and managing constraints, and how important it is to recognise cognitive dissonance.

Resources mentioned in this podcast:

• Simon's LinkedIn profile
• Curious Coffee Club
• Goldratt's Rule of Flow
• The Unicorn Project
• The Goal

DSO Overflow is a DevSecOps London Gathering production. Find the audio version on all good podcast sources like Spotify, Apple Podcast and Buzzsprout.

This podcast is brought to you by our sponsors:  Prisma Cloud, Contrast Security, and Sysdig

Your Hosts
Steve Giguere linkedin.com/in/stevegiguere
Glenn Wilson linkedin.com/in/glennwilson
Jessica Cregg linkedin.com/in/jessicacregg

DevSecOps - London Gathering
Keep in touch with our events associated with this podcast via our website.
For more about DevSecOps - London Gathering check out https://dsolg.com

DSO Overflow S3EP2

Cloud Security
with
Paul Schwarzenberger

In this episode, Steve and I are joined by Paul Schwarzenberger who talks to us about cloud providers, cloud security and an OWASP project he has recently started working on. We hear about Paul's journey into cloud security, his views on certification programmes, and he warns us of the security traps that await us when working with cloud technologies.

Resource mentioned in this podcast:

• OWASP 2023 Global AppSec in Dublin
• OWASP Domain Protect project
• Paul's LinkedIn profile

DSO Overflow is a DevSecOps London Gathering production. Find the audio version on all good podcast sources like Spotify, Apple Podcast and Buzzsprout.

This podcast is brought to you by our sponsors:  Prisma Cloud, Contrast Security, and Sysdig

Your Hosts
Steve Giguere linkedin.com/in/stevegiguere
Glenn Wilson linkedin.com/in/glennwilson
Jessica Cregg linkedin.com/in/jessicacregg

DevSecOps - London Gathering
Keep in touch with our events associated with this podcast via our website.
For more about DevSecOps - London Gathering check out https://dsolg.com

DSO Overflow S3EP1

CVE, CVSS and the Land of Broken Dreams
with
Francesco Cipollone

In this episode, Steve and Glenn are joined by Francesco 'Frank' Cipollone CEO and Founder of AppSec Phoenix. Frank talks about CVEs, CVSS scoring and how they create too much noise to be effective in helping organisations improve their security posture. We hear Frank speak about contextualisation and risk as a means to improve security within your organisation.

Resource mentioned in this podcast:

• AppSec Phoenix website
• Frank's Cyber Security and Cloud Podcast
• Whitepaper on vulnerability management

DSO Overflow is a DevSecOps London Gathering production. Find the audio version on all good podcast sources like Spotify, Apple Podcast and Buzzsprout.

This podcast is brought to you by our sponsors:  Prisma Cloud, Contrast Security, and Sysdig

Your Hosts
Steve Giguere linkedin.com/in/stevegiguere
Glenn Wilson linkedin.com/in/glennwilson
Jessica Cregg linkedin.com/in/jessicacregg

DevSecOps - London Gathering
Keep in touch with our events associated with this podcast via our website.
For more about DevSecOps - London Gathering check out https://dsolg.com

DSO Overflow S3EP5

Security Differently
with
Mario Platt from LastPass

In this episode Glenn Wilson and Steve Giguere sit down with Mario Platt to discuss how the current paradigm of doing security is not working. Taking lessons from how safety is managed within a physically demanding role, Mario examens why compliance is failing and how we need to build a new model based on resilience.

Resources mentioned in this podcast:

• Mario's presentation given at DSO LG in May 2022
• Rasmussen paper Rasmussen, J. (1997). Risk management in a dynamic society: A modelling problem. Safety Science, 27(2-3), 183-213
• Dekker, S. (2015)”Safety Differently - Human Factors for a new era”, Ashgate Publishing
• Decluttering your security management system
• Rasmussen's Systemic Risk Modelling and Cyber Security
• Why our security policies are a business liability and what to do about it

DSO Overflow is a DevSecOps London Gathering production. Find the audio version on all good podcast sources like Spotify, Apple Podcast and Buzzsprout.

This podcast is brought to you by our sponsors:  Prisma Cloud and Sysdig

Your Hosts
Steve Giguere linkedin.com/in/stevegiguere
Glenn Wilson linkedin.com/in/glennwilson
Jessica Cregg linkedin.com/in/jessicacregg

DevSecOps - London Gathering
Keep in touch with our events associated with this podcast via our website.
For more about DevSecOps - London Gathering check out https://dsolg.com

DSO/Overflow S2EP4

Cloud Security at Large
with
Ashish Rajan and Shilpi Bhattacharjee from the Cloud Security Podcast
https://cloudsecuritypodcast.tv/
https://twitter.com/cloudsecpod?lang=en
https://www.youtube.com/c/CloudSecurityPodcast?sub_confirmation=1

Watch on YouTube: https://youtu.be/HV6iJReLoXE

In the episode, Jessica Cregg sits with Ashish and Shilpi and breaks the 4th wall about their mega successful Cloud Security Podcast, what advocacy means, and the state of Cloud Security at large. 

DSO/Overflow is a DevSecOps London Gathering production.  Find the audio version on all good podcast sources like Spotify, Apple Podcast and Buzzsprout
https://open.spotify.com/show/0XVk0AKg26yLTCMMwkIA7m

This podcast is brought to you by our sponsors:  Prisma Cloud and Sysdig

Your Hosts
Steve Giguere: linkedin.com/in/stevegiguere
Glenn Wilson: linkedin.com/in/glennwilson
Jessica Cregg linkedin.com/in/jessicacregg

DevSecOps - London Gathering
Keep in touch with our events associated with this podcast via our website
For more about DevSecOps London Gathering check out
https://dsolg.com