Category: DevOps

  • The source code for this lab exercise is available on GitHub. Consider our typical DevSecOps CI/CD pipeline that triggers automated unit and integration testing, container image building, vulnerability scanning, image pushing and signing, all the way up to deploying to a properly secured production environment on every developer commit to a…

    + , , ,
  • The source code for this lab exercise is available on GitHub. Continuous integration (CI) is the practice of building software from source and performing unit and integration tests in an automated fashion whenever source code changes are committed to a repository, while continuous deployment (CD) goes a step further by automatically…

    + , ,
  • Consider your typical CI/CD pipeline as shown below. What are some of the issues associated with the DevOps workflow below, if any? The main issue is that security measures are not integrated into the pipeline as a first-class citizen. Let’s assume the best case where the Kubernetes cluster hosting the…

    + , , ,