Tanzu Talk

Security for developers has always been…complex. When you re-design for and move your application to the cloud, there’s a new set of security concerns to work with. Adib Saikali’s working on a book on this topic, and he discusses it with Coté in this episode. It all starts with the basics of security, and goes from there. Check out the book and read along as Adib finishes it over at Manning [https://www.manning.com/books/securing-cloud-applications], and, find him in Twitter: @asaikali [https://twitter.com/asaikali].

Governments run on just as much software as the private sector, sometimes it can seem like even more! Government agencies feel the need to run their processes on software like any other organization and are starting to prioritize custom written software. Like everyone else, people in government feel the need to get better at software. In this episode, Jeremiah Sanders and Igor Steinberg talk with Coté about the motivations for getting better at software, common barriers, and a little bit of how people get over those barriers. Some selected topics discussed: * Getting comfortable with “uncertainty” rather than certainty… accepting “failure,” the need to explore. * People are stymied by the interpretation of the rules, not the rules themselves. * Empowering people to be more cross functional. * What compromises do the people on that small team make? Risks.

Developers rely on all sorts of 3rd party frameworks, packages, and projects for their applications. Ensuring that those components are available, secure, and fit into an organizations overall enterprise architecture can be a challenge. Ramya Sarangarajan joins us in this episode to cover how the VMware Marketplace helps out. Check out the VMware Marketplace yourself [https://marketplace.cloud.vmware.com]. Also, follow the marketplace in Twitter [https://twitter.com/vmwmarketplace], if you're into that.

Ben Hale talks about one the foundational concepts in the VMware Tanzu Application Platform, application aware platforms.

Hear Alex Barbato and John Kjell of the VMware Tanzu team discuss why it's important, but still challenging, to secure your software supply chain. Importantly, they focus on the process of building secure software rather than buying it, and explain how new offerings such as Tanzu Application Platform can help automate some of the tedium for developers, operators, and security teams. Learn more: VMware Tanzu [https://tanzu.vmware.com/] VMware Tanzu Labs [https://tanzu.vmware.com/labs] Tanzu Application Platform [https://tanzu.vmware.com/application-platform] Improve Your Cybersecurity with a Secure Software Development Supply Chain [https://tanzu.vmware.com/content/blog/improve-your-cybersecurity-secure-software-development-supply-chain] Implementing DevSecOps in a Federal Agency with VMware Tanzu [https://tanzu.vmware.com/content/blog/implementing-devsecops-federal-agency-vmware-tanzu] Modern Least Privilege and DevSecOps [https://octo.vmware.com/modern-least-privilege-and-devsecops/] What Is DevSecOps? [https://tanzu.vmware.com/devsecops] Secure Supply Chain, with Henri van den Bulk [https://www.tanzutalk.com/222] Follow everyone: VMware Tanzu [https://twitter.com/VMwareTanzu] VMware Tanzu Labs [https://twitter.com/VMwareTanzuLabs] Alex Barbato [https://twitter.com/alexbarbato] John Kjell [https://twitter.com/J0hnKjell] Danielle Burrow [https://twitter.com/dburrow11] Derrick Harris [https://twitter.com/derrickharris]