Config Management Camp 2023 Ghent

Securing the Puppet ecosystem
2023-02-06, 14:50–15:40, B.2.015

We’re improving the security posture of the entire Puppet ecosystem, from scanning Forge modules for malware, to changing Puppet code to make it harder to write vulnerable code, to providing guidance on writing secure Puppet code yourself.

I'm a software engineer and work for Puppet on the Content and Tolling team. I'm passionate about infrastructure automation, developer tooling and DevOps.