2 years ago

While the software industry celebrates a decade of DevOps, there’s an increasing drive toward adopting DevSecOps and making security a part of software from early on. At its core, DevSecOps thrives on a culture and a mindset in which various cross-functional teams share a single goal of continuous software security.

This hampers DevSecOps adoption in two ways: First, development teams suddenly see many security findings in their queues, which makes it impossible for them to address them all over a short sprint, and that causes reluctance to fix security findings.

To achieve this, measuring and collecting relevant data at every stage of the pipeline and security activities is of paramount importance.

It’s important to keep in mind that DevSecOps is not an off-the-shelf tool or a golden pipeline.