DevOps
DevSecOps, SSDLC Implementation
DevSecOps with SSDLC implementation in cooperation with security teams and developers
Input
One of our technological clients, specialising in software embedded in C/C++ had a need to implement DevSecOps with SSDLC, in cooperation with developers and security teams, with a goal to improve CI/CD process.
Technologies:
- Languages: C/C++
- Code repository: Bitbucket Data Center
- Repository: Artifactory
- CI/CD: Jenkins
- Security: Aqua, Sonarqube
Challenge
- Team coordination – ensuring smooth cooperation among teams of developers and security team.
- Security Tests – PoC, integration Aqua, Sonarqube, Jenkins.
- Improvments CI/CD - Jenkins pipeline, security politics implementation – Artifactory.
Solution
Improved security – regular scanning of the code brought improvements
- Increased awareness – training and upskilling of developers improved the quality of the code in the aspects of security.
- More efficient CI/CD - Quicker discovery and problem fixing
