0

Explore Products

Best Sellers

New Releases

Books

Videos

Audiobooks

Free Learning

DevSecOps for Azure

You're reading from DevSecOps for Azure End-to-end supply chain security for GitHub, Azure DevOps, and the Azure cloud

Product type Paperback

Published in Aug 2024

Publisher Packt

ISBN-13 9781837631117

Length 342 pages

Edition 1st Edition

Tools

Azure

Concepts

Agile

Authors (2):

David Okeyode

Joylynn Kirui

View More author details

Table of Contents (14) Chapters

Preface

1. Part 1: Understanding DevOps and DevSecOps

2. Chapter 1: Agile, DevOps, and Azure Overview FREE CHAPTER

3. Chapter 2: Security Challenges of the DevOps Workflow

4. Part 2: Securing the Plan and Code Phases of DevOps

5. Chapter 3: Implementing Security in the Plan Phase of DevOps

6. Chapter 4: Implementing Pre-commit Security Controls

7. Chapter 5: Implementing Source Control Security

8. Part 3: Securing the Build, Test, Release, and Operate Phases of DevOps

9. Chapter 6: Implementing Security in the Build Phase of DevOps

10. Chapter 7: Implementing Security in the Test and Release Phases of DevOps

11. Chapter 8: Continuous Security Monitoring on Azure

12. Index

Why subscribe?

13. Other Books You May Enjoy

Understanding the post-commit phase of DevOps

After committing code changes locally, the developer’s next step is to synchronize these changes with the central remote repository, as indicated in Figure 5.1 (4). This is achieved through the git push operation. The central repository serves as the collective storage for code contributed by all developers working on a project:

Figure 5.1 – The code development phase of DevOps

Figure 5.1 – The code development phase of DevOps

The central repository can be hosted on a source control platform that is either self-hosted or cloud-hosted. According to the 2022 Stack Overflow Developer Survey, GitHub leads as the most favored source control platform for both personal and professional projects. Other platforms such as GitLab, Bitbucket, and Azure Repos are more common in professional environments (Figure 5.2). In Chapter 1, we provided an overview of Microsoft’s two DevOps platforms: GitHub and Azure DevOps. Both platforms offer source control...

The rest of the chapter is locked

Register for a free Packt account to unlock a world of extra content!

A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.

Unlock this book and the full library FREE for 7 days

Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of

Start free trial

Renews at £16.99/month. Cancel anytime

Authors (2)

David Okeyode

David Okeyode

David Okeyode is the EMEA chief technology officer for Azure at Palo Alto Networks. Before that, he was an independent consultant helping companies secure their Azure environments through private expert-level training and assessments. He has authored three books on Azure security – Penetration Testing Azure for Ethical Hackers, Microsoft Azure Security Technologies Certification and Beyond, and Designing and Implementing Microsoft Azure Networking Solutions. He has also authored multiple cloud computing courses for the popular training platform LinkedIn Learning. He holds over 15 cloud certifications across Azure and AWS platforms, including the Azure Security Engineer, Azure DevOps, and AWS Security Specialist certifications. David is married to a lovely girl who makes the best banana cake in the world. They love traveling the world together!

See other products by David Okeyode

Joylynn Kirui

Joylynn Kirui

Joylynn Kirui is a senior cloud security advocate at Microsoft. She focuses on DevSecOps on GitHub and Azure, which includes application security. She is an infosec evangelist who believes in empowering developers and users in general on security best practices. She has vast experience in web and mobile app security testing, DevSecOps, and GSM security, having previously worked in the telco industry. She has a passion for mentorship and training students and empowering them. She has spoken at several conferences, where she shares her knowledge in cybersecurity and software development. She was among the Top 50 Women in Cyber Security Africa 2020 finalists, Woman Hacker of the Year Africa 2020 finalists, and Young CISO Vanguard 2022, among others. When not hacking, she enjoys farming, traveling, and adrenaline-filled activities.

See other products by Joylynn Kirui

Personalised recommendations for you

Based on your interests and search pattern

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m