What you will learn
- Explain shift-left
- Embed security in CI
- Make security everyone's job
New to this? Start here
The basics, in plain English
Security used to be checked only at the very end, right before launch, which made fixing problems slow and costly. Shift-left means moving security checks earlier, into the everyday work of writing and building code. Finding a problem early is far cheaper than finding it after release.
- Security
- Protecting your software and data from attackers and accidents.
- Shift-left
- Doing security checks early in development instead of only at the end.
- Vulnerability
- A weakness in software that an attacker could exploit.
- DevSecOps
- Building security into the normal development and operations workflow.
- Automated check
- A tool that scans your code for problems without a human having to remember.
- Cost of late fixes
- The later a bug is found, the more expensive and risky it is to fix.
01
Earlier is cheaper
Catching a vulnerability in code review costs far less than in production. Shift-left bakes scanning and checks into the developer workflow.
Finished this topic?
Mark it done to earn 100 XP and keep your streak alive.