Original Post: What it takes to make shift left work
The rapid expansion of software surface area has outpaced our ability to secure it, due to the productivity of developers in software-native businesses. Leaders must balance building fast with mitigating security risks, such as low probability but high impact security failures. DevSecOps and the concept of “shift left” aim to move security responsibilities to developers, but issues such as false positives and lack of remediation advice can lead to a growing vulnerability backlog. By making the developer’s path of least resistance the secure path, the app sec doom loop can be broken. The Semgrep AppSec Platform is focused on improving the developer experience to make shift left work effectively.
Go here to read the Original Post