Category: Deployment, github, gitlab

In this series, we will talk about the emergence of the DevSecOps movement, and more especially, what are the benefits of introducing a DevSecOps approach on your existing CI/CD Pipelines.

DevSecOps could be defined as a shift from a central internal security team to the inclusion of security practices into the existing DevOps teams: DevSecOps 🎉

Note that it is as important to deal with this issue for private repositories as it is for public repositories, as most of the attacks come from an internal compromise.

There are tons of examples of companies that have provided bookshops that have subsequently been compromised, including GAFAM, and it is normal, the principle of security is that defense mechanisms are constantly evolving to keep one step ahead of pirates. This is why it is important to have the hygiene of updating third party libraries when developing an application.

Related Articles