Hands-On Security in DevOps

Release gate examples

When all teams are familiar with security practices and have performed some security automation, additional security checklists can be added for higher security standards. A typical security release gate example for each stage is shown in the following table:

Stage	Examples of release Gate
Design	Threat modeling activities were performed for high-risk modules. The uses of third-party component versions was reviewed without major vulnerability. The top common secure design issues were reviewed without major issues.
Coding	The static code analysis tool was used to identify major security risks. High severity issues in the code scanning results were all checked. No sensitive information was found in ...