Efficient DevSecOps Workflows With a Little Help From AI

QCon London 2024

Session DevSecOps

Efficient DevSecOps Workflows With a Little Help From AI

Monday Apr 8 / 11:45AM BST, Churchill (Ground Fl.)

Abstract

From idea to the first line of code to production deployments - DevSecOps workflows help develop software faster. Everyone has reached a different level of adoption, and some processes may feel inefficient, or blocking progress and innovation.

Open the DevSecOps workflow, and find the stage where you spend the most time. Which is the most inefficient task? Planning issues after long discussions, MR review requests without context, maintaining legacy code, team onboarding with new project structures, missing unit tests, or analyzing the impact of security vulnerabilities, or even debugging blocking CI/CD pipelines with long stacktraces …

Join this session to hear a story about experienced pain points, wasted hours to debug and solve, and learn how a little help from AI makes DevSecOps workflows efficient again. Get inspired to take the learnings into action, and join the conversation after the talk with your feature ideas and stories.

Interview

Helping users and customers get more efficient through learning content and exploring new technologies. 

AI adoption increased massively in 2023, and 2024 will be no different. The landscape is moving fast, and learning can be overwhelming. My focus is to explain complex topics into stories and explore AI use cases for DevSecOps from different viewpoints.

AI can help make us more efficient beyond code suggestions across the DevSecOps lifecycle. It also expands into platform engineering and developer experience and opens new ways to look at Observability data or security vulnerabilities. 

A chat prompt to ask a question and get help sounds promising. What about data privacy, is my data being used to train the language models? Which alternatives are available to tackle these challenges?

My motivation is twofold: Understand the most inefficient task in your daily workflow and show ideas for getting more efficient. Changing sides into building AI and LLMs and looking behind the scenes – what is required to build, train, and operate your own cloud-native AI and solve privacy concerns.

Experienced developers, DevOps engineers, and platform engineers. Team leaders measure efficiency and productivity. An intermediate level is required for DevOps workflows, as well as a general understanding of cloud-native infrastructure. 

To be able to identify the most inefficient tasks in the DevSecOps lifecycle and start implementing proposed ideas and actions. Explore new technology and projects, and start a conversation with attendees after the talk to share more use case stories where AI could help. 

Topics

DevSecOps AI/ML Efficiency Development Security
76% senior dev or higher
1:11 speaker ratio
60+ practitioners

QCon London 2024 is a three day conference for senior software engineers, architects and team leads. An international program committee of working engineers selects every session. Patterns and practices, not products and pitches.

Share

From the same track

Monday 8 April

10:35 Churchill (Ground Fl.) Session AWS Efficient Serverless Development: Latest Patterns and Practices on AWS Yan Cui AWS Serverless Hero & Independent Consultant 11:45 Churchill (Ground Fl.) Session DevSecOps Efficient DevSecOps Workflows With a Little Help From AI Michael Friedrich Senior Developer Advocate @GitLab 13:35 Rutherford (4th Fl.) Unconference Unconference: Cloud-Native Engineering 14:45 Churchill (Ground Fl.) Session architecture Building SaaS From Scratch Using Cloud-Native Patterns: A Deep Dive Into a Cloud Startup Joni Collinge Founding Software Engineer @Diagrid 15:55 Churchill (Ground Fl.) Session Infrastructure as Code Borderless Cloud: Designing, Implementing, and Securing Apps Across Multiple Clouds Adora Nwodo Senior Software Engineer, Founder of NexaScale, Multi-Published Author 17:05 Churchill (Ground Fl.) Session storage Stateful Cloud Services at Neon: Navigating Design Decisions and Trade-Offs John Spray Storage Engineering Lead @neon.tech, Formerly Redpanda, Inktank (Ceph), Whamcloud (Lustre)