Eran Kinsbruner -- DevSecOps Continuous Testing

Mark Loveless - aka Simple Nomad - is a security researcher and hacker. He's spoken at numerous security and hacker conferences worldwide, including Blackhat, DEF CON, ShmooCon, and RSA. He's been quoted in the press including CNN, Washington Post, and the New York Times. Mark joins us to discuss his series of blog posts on Threat Modeling at GitLab. We discuss his philosophical approach, framework choice (spoiler alert, it's a pared-down version of PASTA), and success stories / best practices he's seen for threat modeling success. We hope you enjoy this conversation with... Aaron Kinsbruner is the Chief Evangelist and Senior Director at Perforce Software.The Application Security Podcast is brought to you by Security Journey.About Security JourneyAaron Kinsbruner is the Chief Evangelist and Senior Director at Perforce Software.→ Learn more about Security JourneyConnect with Eran Kinsbruner:→ Perforce Software→ JenkinsMentioned in this episode:→ Perforce Software→ Jenkins→ Alyssa MillerFollow the Application Security Podcast:➜ Home➜ X➜ LinkedIn➜ YouTube➜ Instagram➜ FacebookChapters:00:00 Meet Eran Kinsbruner: DevSecOps Continuous Testing03:00 Okay. So in your time focusing on DevOps and DevSecOps before04:46 As we get into testing or talk about testing, before we07:19 One of the, one of the comments, or one of the16:30 As I'm listening to the way you're describing quality gates and21:19 Eran, you mentioned the word quality. a few times. And, you24:37 I got a follow-up question related to quality. And so this27:04 I think we're both on board with the idea that quality31:26 Yeah, definitely. And I think you covered people in the last33:01 Definitely. Eran, it's been great to talk to you today. I