DevSecOps
Building security checks, such as secret scans, dependency scans and policy tests, into the same pipeline that builds and deploys code.
In more detail
Problems are found minutes after a commit instead of at an audit. It pairs with shift-left testing, which moves every kind of test earlier.
Related terms
- continuous integration — Automatically building and testing every change as soon as it is pushed, so problems are caught early.
Taught in
- Two Clicks Nobody Wrote Down: Configuration And Infrastructure As Code — Certified GitOps Associate (CGOA) Exam Prep
- Friday At Five To Five: DevOps And DevSecOps — Certified GitOps Associate (CGOA) Exam Prep
- Related Practices Sprint: One Change, Five Practices — Certified GitOps Associate (CGOA) Exam Prep
- The Evening Before: Final Review — Certified GitOps Associate (CGOA) Exam Prep