Security tools in a continuous integration/continuous deployment pipeline
Year: 2024
Type: article
Abstract: Integrating a vulnerability database into a Continuous Integration / Continuous Deployment (CI/CD) pipeline is essential for enhancing the security posture of software development processes. This integration allows for automated identification and remediation of known vulnerabilities in applications and their dependencies. The process involves selecting a suitable vulnerability database, configuring API access, and embedding API calls within the CI/CD workflow to check for vulnerabilities at various stages of development. Additionally, it encompasses the analysis of vulnerability data, automated dependency management, and the generation of security reports. Continuous monitoring for newly reported vulnerabilities ensures ongoing security, while training and documentation foster a culture of security awareness within development teams
Source: Research and implementation
Author: Zulunov Ravshanbek Mamatovich
Institution: Tashkent University of Information Technology
Language: English
Subfield: Information Systems
Field: Computer Science
Domain: Physical Sciences
Open Access status: diamond
OpenAlex ID: W6968599407
FWCI:
Cites:
Cited by:
Related to: