How we implemented DevSecOps practice at Orange

TalkDevSecOps

2025-12-10 | 09:00 AM - 09:00 AM | Auditorium Niv-2

Information

At Orange, the migration to GitLab began in 2017. After a year of use, we identified a gap in terms of standardization and application of security best practices. In response, we launched an initiative to promote component reuse, standardize our processes, and simplify the implementation of continuous integration and deployment. This project evolved into a true inner source, involving a collective contribution of experts from various fields and technologies, in accordance with DevSecOps principles. Adoption of this approach quickly became widespread, supported by a very active internal community, and more than 17,000 projects use it daily. In this session, we will share our real-life experience, the challenges encountered, the benefits observed, as well as advice for those who wish to deploy or draw inspiration from a similar approach to standardize and optimize their CI/CD pipelines.