Main Purpose
The main purpose of the website checklist.devops.security is to provide a comprehensive checklist for implementing security measures in a DevOps environment.
Key Features
- Analyzing the development process for security hazards
- Creating a common goal between development and security teams
- Integrating security procedures in the development phase
- Adding observability to the pipeline
- Making changes in small, incremental units
- Scanning and securing the entire DevOps pipeline
Use Case
- Pre-commit checks to fix minor security issues before committing changes
- Commit-time checks to ensure code is compilable and focus on critical security issues
- Build-time checks to perform advanced automated testing, security testing, and open-source management
- Test-time checks to execute functional, integration, and performance testing before release
- Deploy-time checks to perform pre- and post-deployment security checks
