SE Radio 575: Nir Valtman on Pipelineless Security

Nir Valtman, co-Founder and CEO at Arnica,
discusses pipelineless security with SE Radio host Priyanka
Raghavan. They start by defining pipelines and then consider how
to add security. Nir lays out the key challenges in getting good
code coverage with the pipeline-based approach, and then
describes how to implement a pipelineless approach and the
advantages it offers. Priyanka quizzes him on the concept of
"zero new hardcoded secrets," as well as some ways to protect
GitHub repositories, and Nir shares examples of how a
pipelineless approach could help in these scenarios. They then
discuss false positives and handling developer fatigue in dealing
with alerts. The show ends with some discussion around the
product that Arnica offers and how it implements the pipelineless
methodology.