Security and DevSecOps with Python

It’s a jungle out there. Disorder and confusion everywhere…

– Randy Newman

(If you know the rest of the song, good for you.)

What is the password that you use most frequently? Do you never re-use a password? Don’t lie to me and don’t lie to yourself in this situation, lest you get locked out of your accounts. I’m using passwords here because that is the easiest way to break the ice on this conversation about security, and passwords are the easiest way to think about security. They provide a secure way to distinguish accounts and users and allow each their own access parameters. What we are going to talk about in this chapter will be a little more complex (just a little) but the underlying principles are the same: it is about securing access and making sure only the right people have access.

In DevSecOps (a branch of DevOps dedicated to security), the goal is to have security measures present and...