Work

Systematic Approach to Prevent Code Vulnerabilities using CI/CD Pipelines

Year: 2024

Type: article

Abstract: This paper discusses a systematic approach to integrating Static Application Security Testing (SAST), Software Composition Analysis (SCA), Code Coverage, and Code Quality Checks into Continuous Integration/Continuous Delivery (CI/CD) pipelines. Modern CI/CD pipelines accelerate software delivery but introduce significant security and quality challenges. By incorporating SAST and SCA for security testing, along with code coverage and quality checks, organizations can prevent code vulnerabilities and ensure the maintainability and reliability of their applications. This approach helps development teams shift security and quality controls left, catching issues early in the development lifecycle. Keywords — CI/CD, DevSecOps, Static Application Security Testing (SAST), Software Composition Analysis (SCA), Code Coverage, Code Quality, Vulnerability

Source: INTERANTIONAL JOURNAL OF SCIENTIFIC RESEARCH IN ENGINEERING AND MANAGEMENT

DOI: 10.55041/ijsrem7171

Author: Kamalakar Reddy Ponaka

Language: English

Topic: Web Application Security Vulnerabilities

Subfield: Information Systems

Field: Computer Science

Domain: Physical Sciences

SDG: Industry, innovation and infrastructure

Open Access status: bronze

OpenAlex ID: W4404104563

FWCI:

Cites: 2

Cited by:

Related to: 10