DevOps to DevSecOps journey: what is possible to cover with free and open source tools

This talk covers the journey of transitioning from DevOps to DevSecOps over the past two years, detailing specific configuration aspects, free and open-source tools used, and the custom scripts developed along the way. The speaker discusses the challenges faced when implementing new tools, workflows, and processes across more than ten development teams, emphasizing the critical prerequisites for a successful DevSecOps initiative. The setup includes custom software development focusing on web and mobile projects, alongside data science and engineering efforts. Aleksandr Zharkov, an experienced software development manager at Heidelberg Materials, shares insights drawn from his two decades in the field, particularly in APIs and cloud development.