Pipelines for Securing your Python Development Lifecycle

🌐 Pipelines for Securing Your Python Development Lifecycle

Curious about making your Python code more secure from the ground up?
Join us for an insightful session with Simon Merrick, Senior Cloud Engineer at Trade Me and active member of New Zealand’s Python community, as he walks us through essential Python tooling and practices for early vulnerability detection.

Discover the importance of securing your Python code early in the development process. Simon will share insights into the current threat landscape, discuss the "shift left" approach to security, and introduce essential practices and tools for building a robust CI pipeline that can catch vulnerabilities before they become issues.

### 🎤 Speaker

Simon Merrick
Senior Cloud Engineer, Trade Me
Secretary, Python New Zealand
Simon brings a wealth of experience in building, scaling, and securing cloud-native software in highly regulated environments. He’s also the host of the Christchurch Python meetup, on the organising team for Kiwi PyCon (New Zealand’s national Python conference), and serves as the Secretary of Python New Zealand.

Check out Narna's LinkedIn:Simon Merrick

### 📅 Agenda

• Understanding the Threat Landscape and Threat Modeling for Developers
• The Importance of "Shifting Left" on Security
• Building a CI Pipeline to Support Security in Development
• Python Tooling for Security Practices
• Linting (flake8, ruff)
• Dependency Vulnerability Scanning (Safety, Pip Audit)
• Static Analysis Security Testing (Bandit, Semgrep)
• Secrets Detection (Gitleaks, GitGuardian)
• Dynamic Analysis Security Testing (Dastardly)
• Container Scanning

### 📍 Location

Hao Room,
The Library at Te Hāpua Halswell Centre,
341 Halswell Road, Halswell, Christchurch

### 🎟️ Admission Fee

• Free for CITA members
• $5 donation for non-members

### 🖇️ How to Join CITA

1. Visit www.cita.org.nz
2. Register an account and log in
3. Click on Membership
4. Apply the student discount (if applicable)
5. Complete the membership payment
6. Follow the email instructions to join the CITA WeChat Group