Work

Integrating Security Vulnerability Management into Agile DevOps Pipelines

Year: 2025
Type: article
Abstract: In modern software development, Agile and DevOps methodologies emphasize rapid iteration, continuous integration, and deployment. However, security vulnerabilities often remain an afterthought, leading to significant risks and potential exploitation. Integrating Security Vulnerability Management (SVM) into Agile DevOps pipelines ensures that security is embedded throughout the development lifecycle rather than treated as a final checkpoint. This paper explores best practices, tools, and frameworks for proactive security integration within an AWS-based environment utilizing Java with Gradle, Angular, Node.js, Aurora MySQL, OpenSearch, S3, GitHub, TeamCity, Jit, and containerized applications deployed on AWS ECS and EKS. Real-world case studies highlight the impact of implementing SVM within Agile DevOps, demonstrating improved security posture, reduced exploitation windows, and enhanced compliance.
Language: English
Open Access status: hybrid
OpenAlex ID: W4408974115
FWCI:
Cites:
Cited by:
Related to: 10