Integrating Software Configuration Management and Security Tools Into Ci/cd Pipelines: Enhancing Automation, Traceability, and Reliability
Year: 2025
Type: article
Abstract: This article analyzes the role of Software Configuration Management (SCM) and security tool integration within Continuous Integration/Continuous Deployment (CI/CD) pipelines. It is determined that embedding vulnerability databases and automated security checks into the pipeline significantly improves the reliability and security of software development processes. Key SCM processes—such as change tracking, version control, and auditing—are examined in the context of CI/CD, and their impact on automation, traceability, and cross-team collaboration is substantiated. The study identifies the benefits of integrating tools such as Git, Docker, and Terraform alongside vulnerability databases (e.g., NVD, Snyk, GitHub Security Advisories). Results demonstrate that this approach reduces integration errors, accelerates release cycles, and ensures proactive vulnerability remediation. It is concluded that the combination of SCM and automated security monitoring is indispensable for modern DevOps practices, enabling consistent, secure, and efficient software delivery.
Author: Ravshanbek Zulunov
Institution: Fergana State Technical University
Language: English
Subfield: Information Systems
Field: Computer Science
Domain: Physical Sciences
Open Access status: green
OpenAlex ID: W7085800683
FWCI:
Cites:
Cited by:
Related to: