DevSecOps basics: 5 steps to standardize (and then scale) security
Jul 20, 2020Vanessa Wegner
Summary
This post outlines five steps to standardize security in DevOps: Educate, Coordinate, Authenticate, Integrate, and Automate. It emphasizes embedding security tools within the development pipeline (SAST, DAST, IAST, fuzzing, license compliance, container scanning, dependency scanning) and automating security practices for consistency, traceability, and repeatability. It also highlights the need for continuous re-evaluation of security standards.
More from the Security Control Framework trail
- Track organization-wide security risk in one dashboard
- Dependency Firewall: Block risky packages before the build
- Two front doors: Module-level access in a Django GRC app
- How GitLab tracks vulnerabilities through refactors and reformatting
- Shai-Hulud copycat campaign targets Python developers through PyPI typosquatting