Kubernetes Security at Shopify Scale: Automating Security Across an Infrastr... Jie Wu & Pulkit Garg

This talk explores the journey of securing infrastructure at Shopify, focusing on automating Kubernetes security across an infrastructure monorepo. The speakers, Jie Wu and Pulkit Garg, discuss the challenges of managing security for thousands of services and deployments, highlighting how a single misconfiguration could adversely affect millions of merchants. They detail how Shopify leverages Semgrep for static code analysis and Open Policy Agent (OPA) for dynamic policy enforcement to identify and mitigate risky configurations before they reach production. Attendees gain insights into integrating these open-source tools for automating security checks and enabling teams to deploy quickly and securely.