DevSecOps for Azure

4

Implementing Pre-commit Security Controls

After the initial planning phase, the application development process shifts to the code development phase, which starts on developer systems or workspaces. Developers, while skilled in feature development and using coding languages, might not know or might overlook security details, leading to mistakes. If not detected and addressed early, these mistakes can lead to unintentional vulnerabilities that can potentially compromise that software or the data it processes.

Additionally, if the development environment/workspace is poorly managed and maintained, it could result in an entry point for attackers to inject malicious code or components into the software.

In this chapter, we will focus on security ...