Summary
The DevSecOps life cycle emphasizes a shift-left approach to security, as a fundamental and proactive part of the development process rather than as an afterthought. The life cycle is depicted as a continuous, iterative process aiming for rapid, reliable software delivery. We explored each stage of the life cycle and identified the specific activities, tools, and stakeholders involved. During the Code, Build, and Test stages of CI, we observed that most of the tools and practices are similar between cloud and embedded application development. The Release, Deploy, Operate, and Monitor stages of CD are where the process and tools are different between cloud and embedded applications.
In the next chapter, we will be exploring processes and practices for automotive IoT software development.