Episode 253: DevSecOps Worst Practices With Tanya Janca of We Hack Purple

An interview with Tanya Janca (We Hack Purple / Semgrep) discussing the DevSecOps divide and recurring application-security failures such as poorly tuned tooling that breaks builds, security test results not integrated into developer workflows, resource-hogging scans, and supply-chain concerns; the transcript emphasizes secure SDLC practices, developer education, and the need for organizations to contribute to open-source security rather than describing any specific incident.