July 2018
Intermediate to advanced
356 pages
9h 18m
English
Content preview from Hands-On Security in DevOps
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
Start your free trial
Implementation review
Implementation review involves the following key activities in a development team:
- Secure coding
- Selection of reliable and secure third-party components
- Secure configuration
Since we will discuss secure configuration in a later section, let's focus on third-party components and secure coding in this section. Automated secure code scanning is considered the most efficient way to review. There are some different technical approaches for secure code review.