Hands-On Security in DevOps

Security Automation with the CI Pipeline

We have reviewed white box testing tips and security testing toolsets. This chapter will focus on security practices in the development phases, as well as how to integrate tools such as Jenkins into continuous integration. In the development phases, we explored the techniques of using IDE plugins to secure code scanning, and suggested some static code analysis tools. For the build and package delivery, secure compiler configurations and dependency vulnerability checks will also be introduced. Finally, web security automation testing approaches and tips will also be discussed in this chapter.

We will cover the following topics in this chapter:

• Security in continuous integration
• Security practices in ...