Implementing Security in the Test and Release Phases of DevOps
The goal of the test phase is to make sure the compiled application provides the expected functionalities and does not contain any bugs that were not detected in the build phase. The goal of the release phase is to prepare and deliver the tested application for deployment to production or other target environments. Depending on a project’s release strategy, the test and release phases often overlap. It is common to release software into a pre-production environment for automated runtime testing, using tools such as Selenium, before releasing it to production. In this chapter, we will cover DevSecOps practices to secure and integrate security into these phases. By the end of this chapter, you will understand these key security practices:
- Ensuring that release artifacts are built from protected branches
- Implementing a code review process
- Selecting a secure artifact source
- Implementing a process...
