{"id":52606,"date":"2020-04-28T09:00:08","date_gmt":"2020-04-28T16:00:08","guid":{"rendered":"https:\/\/github.blog\/?p=52606"},"modified":"2021-05-07T09:42:57","modified_gmt":"2021-05-07T16:42:57","slug":"how-to-build-an-effective-devsecops-culture","status":"publish","type":"post","link":"https:\/\/github.blog\/enterprise-software\/devsecops\/how-to-build-an-effective-devsecops-culture\/","title":{"rendered":"How to build an effective DevSecOps culture"},"content":{"rendered":"

DevOps, SecOps, now DevSecOps<\/a>? While the DevOps we all know brings development and operations teams together, DevSecOps adds another process even high-performing DevOps teams can miss: security.<\/p>\n

By prioritizing secure development alongside speed, DevSecOps helps you ship safer applications by making security part of your current DevOps pipeline<\/a>. It\u2019s more than checking off security vulnerabilities or sorting through false positives. Here\u2019s how you can build a DevSecOps culture that makes a difference\u2014for your code and customers.<\/p>\n

Take a developer-first approach<\/span><\/a><\/h2>\n

Secure applications depend on developers fixing as many vulnerabilities as possible during code review before they can make it to production. But too often, security tools serve up false positives, forcing developers to spend time trying to fix vulnerabilities that don\u2019t actually exist. We\u2019ve heard time and time again: high false-positive rates are the top reason why developers struggle to tackle vulnerabilities while they build.<\/p>\n

Constantly stopping to address these security concerns, only to find a false positive, forces developers out of their workflow. Instead, taking a developer-first approach to security means meeting your team within<\/i> their workflow. The goal of a successful DevSecOps<\/a> culture is to identify bugs and resolve them as you build\u2014or \u201cfail fast,\u201d said Shamal Siwan, Lead DevOps Engineer\/Solutions Architect at the California Department of Technology. \u201cYou fix it and you move forward, because guess what? It takes you a minute to solve that security issue in development when it could potentially take you hours or days to fix in production.\u201d<\/p>\n

Prioritize the right results<\/span><\/a><\/h2>\n

Building trust between your security and DevOps teams isn\u2019t just about deciding when and where you solve vulnerabilities\u2014it\u2019s about which results you prioritize and why. All bugs matter, but some bugs matter more.<\/p>\n

When Facebook added high-quality static analysis results to their developer workflow, the fix rate reached an unprecedented 70 percent<\/a>. Yet when the bugs were presented to the developers outside of their workflow as a list of problems to fix, the fix rate was zero. Why the drastic change? This speaks back to prioritizing a workflow that\u2019s developer-first, but the real key here is the results themselves: delivering \u201chigh-quality results,\u201d or reporting the bugs that had the most critical impact, equaled more bugs fixed over time. Developers knew they weren\u2019t being served a list of false positives, and quickly incorporated bug fixes into their workflow. As the number of false positives went down, the number of real bugs being fixed went up.<\/p>\n

False-positives happen. It\u2019s what you do with them that can make or break your DevSecOps culture. For Jon Parise, Engineering Architect at Pinterest<\/a>, automation has helped bridge the gap\u2014ensuring that the right bugs are found, but also actually fixed. \u201cWith automated security updates not only are security vulnerabilities identified, but we\u2019re presented with a solution that enables us to quickly fix the issue,\u201d Parise explained. And their new approach has even impacted other non-DevSecOps teams: \u201cThis workflow has been a great reminder for us to constantly audit our internal software for similar vulnerabilities.\u201d<\/p>\n

Break down bad habits<\/span><\/a><\/h2>\n

Still, prioritizing high-quality bugs can be easier said than done. False positives have become part of software development\u2014with many teams finding ways to simply work around them. If you\u2019re overwhelmed by bad vulnerability reports, the easiest answer is to shut off vulnerability reporting entirely. If you can\u2019t trust your static analysis, why resolve vulnerabilities at all?<\/p>\n

Effective DevSecOps requires breaking through \u201cbad habits\u201d in your current software culture and finding new ways of working. The easiest place to start is with the tools your development and security teams can actually trust\u2014or in Lead Cyber Security Engineer Sydney Sweeney\u2019s case, tools their Dow Jones<\/a> developers already know how to use. \u201cProviding a similar developer experience from local development through deployment helps prevent passwords from being pushed into the code.\u201d<\/p>\n

Make security an \u201ceveryone\u201d effort<\/span><\/a><\/h2>\n

Even in DevOps, security usually comes at the end of development\u2014the final checkmark before going to production. Communication between security and DevOps teams is either issue-driven or incident-driven, and fixing security issues at the end of your software development lifecycle only adds stress around rescheduling sprint tasks and effort.<\/p>\n

Instead of \u201cus versus them,\u201d make security part of development from the start, and encourage day-to-day collaboration between both teams. This can happen in small ways, like by integrating mandatory security checks into code reviews, or in bigger ways, such as building a unified workflow for processes like application security<\/a> and CI\/CD that are usually siloed. At Dow Jones, incorporating security from the first step makes DevSecOps a given, not a question. \u201cWe have our security controls baked into our pipelines all the way from the first line of code you\u2019re writing,\u201d said Chief Information Security Officer Miguel El Lakkis.<\/p>\n

Security is a community responsibility<\/a>. From managing open source dependencies to fixing the right bugs to protecting customer data, DevSecOps brings that shared responsibility to everyone in your organization\u2014and ensures safer software at every step.<\/p>\n

\n

This post was also published on LinkedIn<\/a> on April 28, 2020.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"

By prioritizing secure development alongside speed, DevSecOps helps you ship safer applications by making security part of your current DevOps pipeline.<\/p>\n","protected":false},"author":1578,"featured_media":52609,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_gh_post_show_toc":"","_gh_post_is_no_robots":"","_gh_post_is_featured":"","_gh_post_is_excluded":"","_gh_post_is_unlisted":"","_gh_post_related_link_1":"","_gh_post_related_link_2":"","_gh_post_related_link_3":"","_gh_post_sq_img":"","_gh_post_sq_img_id":"","_gh_post_cta_title":"","_gh_post_cta_text":"","_gh_post_cta_link":"","_gh_post_cta_button":"","_gh_post_recirc_hide":"","_gh_post_recirc_col_1":"","_gh_post_recirc_col_2":"","_gh_post_recirc_col_3":"","_gh_post_recirc_col_4":"","_featured_video":"","_gh_post_additional_query_params":"","_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"{title}\n\n{excerpt}\n\n{url}","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"_wpas_customize_per_network":false,"jetpack_post_was_ever_published":false,"_links_to":"","_links_to_target":""},"categories":[3318,3313],"tags":[1896],"coauthors":[],"class_list":["post-52606","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-devsecops","category-enterprise-software","tag-insights"],"yoast_head":"\nHow to build an effective DevSecOps culture - The GitHub Blog<\/title>\n<meta name=\"description\" content=\"By prioritizing secure development alongside speed, DevSecOps helps you ship safer applications by making security part of your current DevOps pipeline.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/github.blog\/enterprise-software\/devsecops\/how-to-build-an-effective-devsecops-culture\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How to build an effective DevSecOps culture\" \/>\n<meta property=\"og:description\" content=\"By prioritizing secure development alongside speed, DevSecOps helps you ship safer applications by making security part of your current DevOps pipeline.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/github.blog\/enterprise-software\/devsecops\/how-to-build-an-effective-devsecops-culture\/\" \/>\n<meta property=\"og:site_name\" content=\"The GitHub Blog\" \/>\n<meta property=\"article:published_time\" content=\"2020-04-28T16:00:08+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-05-07T16:42:57+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/github.blog\/wp-content\/uploads\/2020\/04\/eanderson-devops-culture.jpeg?fit=1920%2C1080\" \/>\n\t<meta property=\"og:image:width\" content=\"1920\" \/>\n\t<meta property=\"og:image:height\" content=\"1080\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Erica Anderson\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"How to build an effective DevSecOps culture\" \/>\n<meta name=\"twitter:description\" content=\"By prioritizing secure development alongside speed, DevSecOps helps you ship safer applications by making security part of your current DevOps pipeline.\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/github.blog\/wp-content\/uploads\/2020\/04\/eanderson-devops-culture.jpeg?fit=1920%2C1080\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Erica Anderson\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/github.blog\\\/enterprise-software\\\/devsecops\\\/how-to-build-an-effective-devsecops-culture\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/github.blog\\\/enterprise-software\\\/devsecops\\\/how-to-build-an-effective-devsecops-culture\\\/\"},\"author\":{\"name\":\"Erica Anderson\",\"@id\":\"https:\\\/\\\/github.blog\\\/#\\\/schema\\\/person\\\/a4c56a494ff23a4d9cb666527cec9379\"},\"headline\":\"How to build an effective DevSecOps culture\",\"datePublished\":\"2020-04-28T16:00:08+00:00\",\"dateModified\":\"2021-05-07T16:42:57+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/github.blog\\\/enterprise-software\\\/devsecops\\\/how-to-build-an-effective-devsecops-culture\\\/\"},\"wordCount\":856,\"image\":{\"@id\":\"https:\\\/\\\/github.blog\\\/enterprise-software\\\/devsecops\\\/how-to-build-an-effective-devsecops-culture\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/github.blog\\\/wp-content\\\/uploads\\\/2020\\\/04\\\/eanderson-devops-culture.jpeg?fit=1920%2C1080\",\"keywords\":[\"insights\"],\"articleSection\":[\"DevSecOps\",\"Enterprise software\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/github.blog\\\/enterprise-software\\\/devsecops\\\/how-to-build-an-effective-devsecops-culture\\\/\",\"url\":\"https:\\\/\\\/github.blog\\\/enterprise-software\\\/devsecops\\\/how-to-build-an-effective-devsecops-culture\\\/\",\"name\":\"How to build an effective DevSecOps culture - The GitHub Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/github.blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/github.blog\\\/enterprise-software\\\/devsecops\\\/how-to-build-an-effective-devsecops-culture\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/github.blog\\\/enterprise-software\\\/devsecops\\\/how-to-build-an-effective-devsecops-culture\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/github.blog\\\/wp-content\\\/uploads\\\/2020\\\/04\\\/eanderson-devops-culture.jpeg?fit=1920%2C1080\",\"datePublished\":\"2020-04-28T16:00:08+00:00\",\"dateModified\":\"2021-05-07T16:42:57+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/github.blog\\\/#\\\/schema\\\/person\\\/a4c56a494ff23a4d9cb666527cec9379\"},\"description\":\"By prioritizing secure development alongside speed, DevSecOps helps you ship safer applications by making security part of your current DevOps pipeline.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/github.blog\\\/enterprise-software\\\/devsecops\\\/how-to-build-an-effective-devsecops-culture\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/github.blog\\\/enterprise-software\\\/devsecops\\\/how-to-build-an-effective-devsecops-culture\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/github.blog\\\/enterprise-software\\\/devsecops\\\/how-to-build-an-effective-devsecops-culture\\\/#primaryimage\",\"url\":\"https:\\\/\\\/github.blog\\\/wp-content\\\/uploads\\\/2020\\\/04\\\/eanderson-devops-culture.jpeg?fit=1920%2C1080\",\"contentUrl\":\"https:\\\/\\\/github.blog\\\/wp-content\\\/uploads\\\/2020\\\/04\\\/eanderson-devops-culture.jpeg?fit=1920%2C1080\",\"width\":1920,\"height\":1080},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/github.blog\\\/enterprise-software\\\/devsecops\\\/how-to-build-an-effective-devsecops-culture\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/github.blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Enterprise software\",\"item\":\"https:\\\/\\\/github.blog\\\/enterprise-software\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"DevSecOps\",\"item\":\"https:\\\/\\\/github.blog\\\/enterprise-software\\\/devsecops\\\/\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"How to build an effective DevSecOps culture\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/github.blog\\\/#website\",\"url\":\"https:\\\/\\\/github.blog\\\/\",\"name\":\"The GitHub Blog\",\"description\":\"Updates, ideas, and inspiration from GitHub to help developers build and design software.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/github.blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/github.blog\\\/#\\\/schema\\\/person\\\/a4c56a494ff23a4d9cb666527cec9379\",\"name\":\"Erica Anderson\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/dee429db9b61bedceba07d9d3c8522813160a3752ceab97671babaf0c3f1087b?s=96&d=mm&r=g4abda10ee02f1f7cb9ad185b7460191f\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/dee429db9b61bedceba07d9d3c8522813160a3752ceab97671babaf0c3f1087b?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/dee429db9b61bedceba07d9d3c8522813160a3752ceab97671babaf0c3f1087b?s=96&d=mm&r=g\",\"caption\":\"Erica Anderson\"},\"url\":\"https:\\\/\\\/github.blog\\\/author\\\/eanderson\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"How to build an effective DevSecOps culture - The GitHub Blog","description":"By prioritizing secure development alongside speed, DevSecOps helps you ship safer applications by making security part of your current DevOps pipeline.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/github.blog\/enterprise-software\/devsecops\/how-to-build-an-effective-devsecops-culture\/","og_locale":"en_US","og_type":"article","og_title":"How to build an effective DevSecOps culture","og_description":"By prioritizing secure development alongside speed, DevSecOps helps you ship safer applications by making security part of your current DevOps pipeline.","og_url":"https:\/\/github.blog\/enterprise-software\/devsecops\/how-to-build-an-effective-devsecops-culture\/","og_site_name":"The GitHub Blog","article_published_time":"2020-04-28T16:00:08+00:00","article_modified_time":"2021-05-07T16:42:57+00:00","og_image":[{"width":1920,"height":1080,"url":"https:\/\/github.blog\/wp-content\/uploads\/2020\/04\/eanderson-devops-culture.jpeg?fit=1920%2C1080","type":"image\/jpeg"}],"author":"Erica Anderson","twitter_card":"summary_large_image","twitter_title":"How to build an effective DevSecOps culture","twitter_description":"By prioritizing secure development alongside speed, DevSecOps helps you ship safer applications by making security part of your current DevOps pipeline.","twitter_image":"https:\/\/github.blog\/wp-content\/uploads\/2020\/04\/eanderson-devops-culture.jpeg?fit=1920%2C1080","twitter_misc":{"Written by":"Erica Anderson","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/github.blog\/enterprise-software\/devsecops\/how-to-build-an-effective-devsecops-culture\/#article","isPartOf":{"@id":"https:\/\/github.blog\/enterprise-software\/devsecops\/how-to-build-an-effective-devsecops-culture\/"},"author":{"name":"Erica Anderson","@id":"https:\/\/github.blog\/#\/schema\/person\/a4c56a494ff23a4d9cb666527cec9379"},"headline":"How to build an effective DevSecOps culture","datePublished":"2020-04-28T16:00:08+00:00","dateModified":"2021-05-07T16:42:57+00:00","mainEntityOfPage":{"@id":"https:\/\/github.blog\/enterprise-software\/devsecops\/how-to-build-an-effective-devsecops-culture\/"},"wordCount":856,"image":{"@id":"https:\/\/github.blog\/enterprise-software\/devsecops\/how-to-build-an-effective-devsecops-culture\/#primaryimage"},"thumbnailUrl":"https:\/\/github.blog\/wp-content\/uploads\/2020\/04\/eanderson-devops-culture.jpeg?fit=1920%2C1080","keywords":["insights"],"articleSection":["DevSecOps","Enterprise software"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/github.blog\/enterprise-software\/devsecops\/how-to-build-an-effective-devsecops-culture\/","url":"https:\/\/github.blog\/enterprise-software\/devsecops\/how-to-build-an-effective-devsecops-culture\/","name":"How to build an effective DevSecOps culture - The GitHub Blog","isPartOf":{"@id":"https:\/\/github.blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/github.blog\/enterprise-software\/devsecops\/how-to-build-an-effective-devsecops-culture\/#primaryimage"},"image":{"@id":"https:\/\/github.blog\/enterprise-software\/devsecops\/how-to-build-an-effective-devsecops-culture\/#primaryimage"},"thumbnailUrl":"https:\/\/github.blog\/wp-content\/uploads\/2020\/04\/eanderson-devops-culture.jpeg?fit=1920%2C1080","datePublished":"2020-04-28T16:00:08+00:00","dateModified":"2021-05-07T16:42:57+00:00","author":{"@id":"https:\/\/github.blog\/#\/schema\/person\/a4c56a494ff23a4d9cb666527cec9379"},"description":"By prioritizing secure development alongside speed, DevSecOps helps you ship safer applications by making security part of your current DevOps pipeline.","breadcrumb":{"@id":"https:\/\/github.blog\/enterprise-software\/devsecops\/how-to-build-an-effective-devsecops-culture\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/github.blog\/enterprise-software\/devsecops\/how-to-build-an-effective-devsecops-culture\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/github.blog\/enterprise-software\/devsecops\/how-to-build-an-effective-devsecops-culture\/#primaryimage","url":"https:\/\/github.blog\/wp-content\/uploads\/2020\/04\/eanderson-devops-culture.jpeg?fit=1920%2C1080","contentUrl":"https:\/\/github.blog\/wp-content\/uploads\/2020\/04\/eanderson-devops-culture.jpeg?fit=1920%2C1080","width":1920,"height":1080},{"@type":"BreadcrumbList","@id":"https:\/\/github.blog\/enterprise-software\/devsecops\/how-to-build-an-effective-devsecops-culture\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/github.blog\/"},{"@type":"ListItem","position":2,"name":"Enterprise software","item":"https:\/\/github.blog\/enterprise-software\/"},{"@type":"ListItem","position":3,"name":"DevSecOps","item":"https:\/\/github.blog\/enterprise-software\/devsecops\/"},{"@type":"ListItem","position":4,"name":"How to build an effective DevSecOps culture"}]},{"@type":"WebSite","@id":"https:\/\/github.blog\/#website","url":"https:\/\/github.blog\/","name":"The GitHub Blog","description":"Updates, ideas, and inspiration from GitHub to help developers build and design software.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/github.blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/github.blog\/#\/schema\/person\/a4c56a494ff23a4d9cb666527cec9379","name":"Erica Anderson","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/dee429db9b61bedceba07d9d3c8522813160a3752ceab97671babaf0c3f1087b?s=96&d=mm&r=g4abda10ee02f1f7cb9ad185b7460191f","url":"https:\/\/secure.gravatar.com\/avatar\/dee429db9b61bedceba07d9d3c8522813160a3752ceab97671babaf0c3f1087b?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/dee429db9b61bedceba07d9d3c8522813160a3752ceab97671babaf0c3f1087b?s=96&d=mm&r=g","caption":"Erica Anderson"},"url":"https:\/\/github.blog\/author\/eanderson\/"}]}},"jetpack_publicize_connections":[],"jetpack_shortlink":"https:\/\/wp.me\/pamS32-dGu","jetpack_sharing_enabled":true,"jetpack_featured_media_url":"https:\/\/github.blog\/wp-content\/uploads\/2020\/04\/eanderson-devops-culture.jpeg?fit=1920%2C1080","_links":{"self":[{"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/posts\/52606","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/users\/1578"}],"replies":[{"embeddable":true,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/comments?post=52606"}],"version-history":[{"count":6,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/posts\/52606\/revisions"}],"predecessor-version":[{"id":56405,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/posts\/52606\/revisions\/56405"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/media\/52609"}],"wp:attachment":[{"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/media?parent=52606"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/categories?post=52606"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/tags?post=52606"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/coauthors?post=52606"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}