DevSecOps notes and differnce btween devops vs devdecops.pptx

DevSecOps notes and difference between devops vs devdecops.pptx

1. Continuous Delivery Continuous delivery is a practice where code changes are automatically prepared for a release to production

2. Continuous Delivery

3. Continuous Delivery

4. Continuous Delivery

5. Traditional Builds

6. Traditional Builds

7. Continuous Integration CI is a practice that helps to frequently integrate code changes into a central repository and then automate Builds

8. Continuous Integration

9. Production Grade DevSecOps Build Pipeline

10. Production Grade DevSecOps Build Pipeline Stage 1: Build & Unit Test Generate Artifacts Unit test Tools: Maven

11. Production Grade DevSecOps Build Pipeline Stage 2: Code Coverage How Many lines of code you tested? Unused code Tools: Jacoco

12. Production Grade DevSecOps Build Pipeline Stage 3: Software composition analysis Identify Vulnerabilities introduced by open-source or 3rd party libraries used in code Tools: OWASP Dependency-check

13. Production Grade DevSecOps Build Pipeline Stage 4: Static Application Security Testing Identify Vulnerabilities in proprietary code Insecure coding practice Tools: Sonarqube

14. Production Grade DevSecOps Build Pipeline Stage 5: Quality Gates Check if application meets the quality standards Tools: Sonarqube Quality profile

15. Production Grade DevSecOps Build Pipeline Stage 6: Build Docker Image Generate Deployable Artifact Tools: Dockerfile

16. Production Grade DevSecOps Build Pipeline Stage 7: Scan Docker Image Identify Vulnerabilities in Image layers Tools: Trivy

17. Production Grade DevSecOps Build Pipeline Stage 8: Smoke Test Verify if the Image is built properly Determine if Image/Application is ready for testing Tools: Docker Container

18. Production Grade DevSecOps Build Pipeline Stage 8: Smoke Test Verify if the Image is built properly Determine if Image/Application is ready for testing Tools: Docker Container

19. Continuous Integration CI is a practice that helps to frequently integrate code changes into a central repository and then automate Builds