October 2016 Summaries

Snyk has announced a new integration with Bitbucket Pipelines, making it easy to stay secure while managing work with the Atlassian product stack. The integration allows developers to find and fix vulnerabilities with Snyk's Pipelines integration, which flags security issues and provides a step-by-step process for resolving them. To set up the integration, users need to add the Bitbucket Pipelines add-on, create a .snyk policy file, and configure a bitbucket-pipelines.yml file. The integration is designed to meet governance and compliance needs with Snyk's dev-first tooling providing integrated and automated security.

Most developers agree that building security into their development practices is crucial due to the increasing pace of development, shortage of security practitioners, and the fact that most vulnerabilities are simply bugs. A new podcast called "The Secure Developer" aims to help this conversation by featuring guests who share their experience on building security into their companies, discussing tools that can help, and reviewing good and bad practices seen in the real world. The goal is to arm developers and AppSec teams with better ways to upgrade their security posture, one step at a time! The podcast is created through Heavybit, an amazing program for developer tooling companies, and can be subscribed to on various platforms or followed on Twitter at TheSecureDev. The podcast has already grown into a community, hosting webinars, and providing a safe place for developers to learn about application security.