DevSecOps toolchain: da Open Source
a Enterprise è un attimo...
o quasi!
Tips & tricks per cavalcare sempre l’onda giusta nel tempestoso oceano dell’IT moderno

• The Four Phases of DevOps
• DevSecOps ToolChain
• Emerasoft ToolChain
• Real Case: Internet Service Provider CI/CD
• Real Case: WSO2 CI/CD
Schedule

• The Four Phases of DevOps
• DevSecOps ToolChain
• Emerasoft ToolChain
• Real Case: Internet Service Provider CI/CD
• Real Case: WSO2 CI/CD
Schedule

BYO DevOps
Bring your own approach
Benefits
○ Increased individual team productivity
Costs and Risks
○ Uncoordinated purchasing
○ Redundant and incompatible tools
○ Redundant maintenance
○ Data &process silos
○ No alignment among teams
○ No integrations among teams
○ No centralized security or compliance
○ No consistent traceability /monitoring
A system of disparate tools
01
The Four Phases of DevOps

BIC DevOps
Best in class approach
Benefits
○ Reduced tool license cost
○ Reduced training overhead
○ Increased Team Collaboration
○ Less tool to maintain
Costs and Risks
○ No centralized governance
○ Manual handoffs ofconnectionamong tools
○ Data loss
○ Data &process silos
○ No alignment among functions
○ No centralized security or compliance
○ No consistent traceability /monitoring
A standardized toolchain
02
The Four Phases of DevOps

DIY DevOps
Doit yourself approach
Benefits
○ Increased governance and auditability
○ Automated handoffs between tools
Costs and Risks
○ Expensive custom integrations and
maintenance (updates)
○ Integration fragility limits innovation,
visibility
○ Security and testing often occur too late
A custom integration
03
The Four Phases of DevOps

DevOps
Platform
All together now
Benefits
○ Faster cycle times
○ Revenue acceleration
○ High collaboration
○ Improved security /monitoring
○ Fewer errors
○ No Maintenance (Saas)
○ Less Maintenance (On-Prem)
A single application
04
The Four Phases of DevOps

The Four Phases of DevOps

• The Four Phases of DevOps
• DevSecOps ToolChain
• Emerasoft ToolChain
• Real Case: Internet Service Provider CI/CD
• Real Case: WSO2 CI/CD
Schedule

CODE REVIEW
Gitlab DevOps Platform
Sonatype Lift
Secure Code Warrior
SAST / DAST
Gitlab DevOps Platform
SOFTWARE COMPOSITION ANALYSIS
Sonatype Nexus Firewall
Sonatype Nexus LifeCycle
SECURITY TESTING
SmartBear Ready API
42 Crunch Platform
Yagaan Security Suite
DevSecOps ToolChain

COMPLIANCE POLICY VALIDATION
Sonatype Nexus LifeCycle
LOG AND AUDIT
Elastic ELK
RUNTIME APPLICATION PROTECTION
Digital.ai Application
Protection
CONTINUOUS MONITORING
Sonatype Nexus Container
Smartbear Alert Site
42 Crunch Platform
DevSecOps ToolChain

• The Four Phases of DevOps
• DevSecOps ToolChain
• Emerasoft ToolChain
• Real Case: Internet Service Provider CI/CD
• Real Case: WSO2 CI/CD
Schedule

Emerasoft ToolChain : Jenkins

Emerasoft ToolChain : Gitlab

• The Four Phases of DevOps
• DevSecOps ToolChain
• Emerasoft ToolChain
• Real Case:Internet Service Provider CI/CD
• Real Case: WSO2 CI/CD
Schedule

Real Case: Internet Service Provider : CI/CD Adoption checklist

Real Case: Internet Service Provider : CI/CD Toolchain

Real Case: Internet Service Provider : CI/CD Flow

Real Case: Internet Service Provider : DevOps Orchestration

• The Four Phases of DevOps
• DevSecOps ToolChain
• Emerasoft ToolChain
• Real Case: Internet Service Provider CI/CD
• Real Case:WSO2 CI/CD
Schedule

Real Case: WSO2 CI/CD - Build/Deploy on VM

Real Case: WSO2 CI/CD - Build/Deploy on Container

Emerasoft, Lynx Group, fornisce competenze e soluzioni che permettono di affrontare
senza rischi le nuove sfide poste dal mercato grazie a un approccio collaudato.
Da oltre 15 anni Emerasoft porta in Italia tecnologie di frontiera su tematiche quali
Software Engineering, DevSecOps, IT Modernization, low-code..
Oggi insieme a Profesia rappresenta il comparto Innovazione del Gruppo.
Scopri chi siamo su www.emerasoft.com
Scopri il Gruppo Lynx su www.lynxspa.com

GRAZIE!
DOVE SIAMO
Milano - Torino - Padova - Roma
TELEFONO
Torino +39-011-0120370
WEBSITE
www.emerasoft.com
EMAIL
sales@emerasoft.com
SOCIAL