The Reasoning Show

Developer Security

8 snips
Jun 14, 2023
Ask episode
AI Snips
Chapters
Transcript
Episode notes
ANECDOTE

Randall's Journey From OpenBSD To Snyk

  • Randall Degges described his path from OS work on OpenBSD to devrel at Stormpath and Snyk, showing long ties to security and developer tools.
  • He explained building auth libraries, joining Okta after acquisition, then leading developer security education at Snyk.
INSIGHT

Developer Security Evolved From Manual Reviews

  • Developer security historically relied on security teams manually reviewing code and dependencies, leaving many projects with no security tooling.
  • OWASP's Top 10 frames common web vulnerabilities like unsanitized input leading to SQL injection, showing persistent patterns across decades.
ADVICE

Start With Static Analysis In Your Workflow

  • Start with a static analysis tool integrated into your IDE and source control to get immediate security feedback.
  • Connect a tool like Snyk to GitHub to run automatic scans, receive alerts, and optionally get fix pull requests.
Get the Snipd Podcast app to discover more snips from this episode
Get the app