OWASP Bucharest AppSec Conference 2018 Workshops

Workshop
Time	Title	Trainers	Description
Workshop 25th of October 4 hours: begins at 10:00	Automated CI Pipelines using ZAP, Docker and static code analysis		Description: In this workshop we will go through customizing ZAP's docker images and some static code analysis scripts to work with GitLab CI so that it automatically tests the deployed web application. Moreover we will write an example ZAP orchestration script to better test specific parts of the example application. Last, we will create Docker containers of two static code analysis scripts so that we can easily integrate them into the CI pipeline. We will go through: Configuring GitLab CI to work with ZAP. Configuring the testing harness to work with ZAP Writing orchestration scripts to better test specific part of the application. Package extra tooling so that we better test the committed codebase At the end of the workshop the attendees will have example configuration files, orchestration scripts, rules and Dockerfiles for all tools used. Intended audience: developers, security enthusiasts Skill level: intermediate Requirements: coding skills, a laptop Seats available: 20 (first-come, first served) Price: free [ Register here]
Workshop 25th of October 3 hours: begins at 13:30			Description: Intended audience: Skill level: Requirements: Seats available: Price: free [Register here]
Workshop 25th of October 3 hours: begins at 9:30			Description: Prerequisites: Software Requirements: Seats available: Price: free [Register here]