DevSecOps

Secure software delivery, CI/CD pipelines, infrastructure as code, and security-as-engineering practice.

1 article

DevSecOps2 March 20238 min read

DevSecOps for Enterprise Applications

DevSecOps in regulated enterprises is the discipline of moving security from a late-stage audit into the engineering pipeline. A practitioner view of which controls actually belong in CI/CD, which belong at runtime, and which belong nowhere because they have outlived their purpose.