In this chapter, you will learn how Copilot can assist in several DevSecOps tasks. DevSecOps tasks can be complicated to learn and implement. With Copilot by your side, you will be empowered to create the necessary resources and actions that will get your application from concept to center stage.
Detailing DevSecOps
Simplifying Containers
Automating Infrastructure as Code
Streamlining CI/CD Pipelines
Detailing DevSecOps
DevSecOps, short for development, security, and operations, is a software engineering culture and practice that aims to unify software development (Dev), security (Sec), and operations (Ops).
To practice DevSecOps, security needs to be considered at every phase of the software development life cycle (SDLC) (see Figure 10.1).
As you can see from Figure 10.1, in addition to the development tasks, the release, deployment, operation, and monitoring tasks all play a vital role in successful software delivery with security embedded at every task.
Figure 10.1: DevSecOps diagram detailing security considered at each stage of the DevOps cycle
Here are some key points:
Shift left on security: This means introducing security as early as possible in the life cycle of app development. This is a significant change from traditional practices where security was often considered at the end of the development cycle (“shifting ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month, and much more.
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.
Julian F.
Head of Cybersecurity
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.
Addison B.
Field Engineer
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.
Amir M.
Data Platform Tech Lead
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.
