Aikido: Is a Single DevSecOps Tool Possible?

Aikido: Is a Single DevSecOps Tool Possible?

Author: Bret Fisher December 27, 2024 Duration: 1:01:56

Or watch the video version on YouTube. Bret is joined by Willem Delbare and Roeland Delrue to discuss Aikido, a security tool consolidation platform designed specifically for smaller teams and solo DevOps practitioners.

😇 My new GitHub Security workshop has launched! A free 2-hour workshop with hands-on labs to harden your repos and your workflows from common supply chain attacks. I'll cover how attackers are getting in, and then we'll lock down a sample repo so you know what needs to be done to protect your code. You'll leave with a deep understanding of risks and mitigations as well as a list of helpful tools to keep your repos safe, including my new "gasa" tool for scanning your repos and orgs.

The discussion explores how Aikido addresses the growing challenges of software supply chain security by bringing together various security tools - from CVE scanning to cloud API analysis - under a single, manageable portal. Unlike enterprise-focused solutions, Aikido targets the needs of smaller teams and individual DevOps engineers who often juggle multiple responsibilities. During the episode, they demonstrate Aikido's capabilities using Bret's sample GitHub organization, and show how teams can implement comprehensive security measures without managing multiple separate tools.

There's also a video version on YouTube.

★Topics★
Aikido website
Aikido on Bluesky
Aikido on LinkedIn

Creators & Guests

  • (00:00) - Intro
  • (06:20) - Aikido Origin Story
  • (10:32) - What Does AutoFix Mean?
  • (13:18) - Security Automation and Developers
  • (21:32) - Lessons from Onboarding Customers
  • (23:10) - Reducing Noise and Alert Fatigue with Aikido
  • (27:30) - Aikido in the CI/CD Process
  • (31:26) - AI Security Integration
  • (32:24) - GitHub Actions and Dependencies as Attack Vector
  • (39:20) - Dependencies in Programming Languages
  • (41:30) - Infrastructure as Code and Cloud Security
  • (48:17) - Runtime Protection with Aikido Zen
  • (54:25) - Agent Involvement in Scanning
  • (57:54) - Tools to Use Alongside Aikido
  • (01:01:16) - Getting Started with Aikido

You can also support this podcast by subscribing to my YouTube channel and my monthly newsletter at bret.news!

Grab the best coupons for my GitHub, Agents, Docker, and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

★ Support this podcast ★

Bret Fisher hosts DevOps and Docker Talk: Cloud Native Interviews and Tooling alongside Nirmal Mehta, pulling conversations directly from their live audience sessions. This isn't a theoretical lecture series; it's grounded in the practical, often messy realities of building and running modern systems. Each episode digs into the specific tools and philosophies shaping infrastructure today, from the foundational elements like Docker and container orchestration with Kubernetes or Swarm to the broader cultural shifts of DevOps, SRE, and platform engineering. You'll hear discussions that span the entire software lifecycle, touching on the integration of security with DevSecOps, the automation promises of GitOps, and what "Cloud Native" truly means for development teams. The dialogue stays focused on actionable insights and real-world use cases, offering a genuine sense of what works and what doesn't in the field. For anyone navigating the container and cloud ecosystem, this podcast serves as a regular, insightful check-in with practitioners and experts, hosted by someone deeply embedded in the community. The natural, interview-driven format makes complex topics accessible, ensuring listeners come away with more than just buzzwords-they get context and clarity.
Author: Language: English Episodes: 50

DevOps and Docker Talk: Cloud Native Interviews and Tooling
Podcast Episodes
Is Docker Building the Best AI Stack? [not-audio_url] [/not-audio_url]

Duration: 1:05:28
Bret and Nirmal are joined by Michael Irwin to discuss Docker's comprehensive AI toolkit, covering everything from local model deployment to cloud-based container orchestration across multiple interconnected tools and se…
Could AI End Human QA? [not-audio_url] [/not-audio_url]

Duration: 52:41
Bret is joined by Andrew Tunall, the President and Chief Product Officer at Embrace, to discuss his prediction that we’ll all start shipping non-QA'd code (buggier code in production) and QA will need to be replaced with…
AI Agents Running Containers [not-audio_url] [/not-audio_url]

Duration: 55:14
The Daytona founders - Ivan Burazin and Vedran Jukic - discuss their pivot to an AI agent cloud. We dig into the new infrastructure requirements of developing agents that need their own sandboxes to operate in.A year ago…
Heroku + MCP = The Fastest Way to Run AI Agents in the Cloud [not-audio_url] [/not-audio_url]

Duration: 41:23
Julián Duque from Heroku joins me to explain and demo their new AI platform.Check out the video podcast version here https://youtu.be/BGqlLZHdRDs😇 My new GitHub Security workshop has launched! A free 2-hour workshop with…
Is AI ready for DevOps? [not-audio_url] [/not-audio_url]

Duration: 27:10
Launching our new Podcast: https://agenticdevops.fmBret and Nirmal are at KubeCon London and record their ideas about how AI Agents will change DevOps, platform engineering, SRE, automation, troubleshooting, and more.😇 M…
What you missed at KubeCon [not-audio_url] [/not-audio_url]

Duration: 39:21
At KubeCon EU 2025 in London, Nirmal and I discussed the important (and not-so-important) things you might have missed. 😇 My new GitHub Security workshop has launched! A free 2-hour workshop with hands-on labs to harden…
Docker Model Runner [not-audio_url] [/not-audio_url]

Duration: 13:06
Docker launched "Docker Model Runner" to run LLMs through llama.cpp with a single "docker model" command. In this episode Bret details examples and some useful use cases for using this way to run LLMs. He breaks down the…
What's Coming in 2025? [not-audio_url] [/not-audio_url]

Duration: 16:42
This episode is about what I'm seeing and what I'm doing right now, and then for the rest of the year. There are three parts. First, I talk about what's about to happen for me for the next few weeks re going to London fo…
Docker Build the best way with Docker Bake [not-audio_url] [/not-audio_url]

Duration: 15:05
The Docker Bake Build tool just went general availability, and I'm excited about what this means for creating reproducible builds and automation that can run anywhere. In this video I'm gonna break down some of the featu…
Is Swarm at EOL? [not-audio_url] [/not-audio_url]

Duration: 18:03
I've been a big fan of Swarm since it was launched over a decade ago and I've made multiple courses on it that still sell. But, we recently got some news out of Mirantis that might be bad news. So I talked about it last…