Your code can be compromised! But there are things that developers can do by shifting left and applying good security practices and ultimately avoid painful and costly problems.

Applications are under attack and developers become the first line of defense by protecting the code and ensuring that we are applying security best practices.

There are several methods to attack your code, from directly inserting malicious code into your repo, to taking over an account or compromising a signing key to distribute software that isn’t officially part of a component, and many other ways.

It’s simple to talk about shifting left on security, but how exactly are you supposed to do that? What tools should you be using and how do you apply them in a way that helps you release with confidence? We will cover the concept of application security, talk about tools available to you and ways that you can help ensure that tools don’t get in the way of development.