We needed to audit our github repository while maintaining developer flexibility to push whenever and whatever changes to get the job done. We wanted to check against three things - security critical code changes, peer review, and approval. We created gitreview as a lightweight overlay on to of github and discovered a new paradigm for managing all changes in our environment.

I'm Jon Debonis. I've been taking apart computers and electronics then putting back together for 21 years. I'm Google alumni, brought Kaiser Permanente to PCI compliance, and worked with many other companies to meet security goals. I currently work with startups to establish secure architecture in development, infrastructure, and to establish information security management programs and compliance. Most of my free time goes to raising my 4 kids, all of whom are under 4-years old.

Back to BSides San Francisco 2015 video list