Implementing Source Control Security
In the previous chapter, we divided the DevOps code development process into two key phases: the pre-commit phase and the source control management phase. This division was made to simplify our discussion of security integration. We’ve already discussed the security practices in the pre-commit phase. Next, we will shift our focus to the security aspects within source control.
Source control in DevOps is a way to organize and track the code for a project using a source control management (SCM) system such as Git or Team Foundation Version Control (TFVC). When implementing DevSecOps in source control, it is important to consider how the code repository is managed and secured. If access to the code repository is compromised or protections can be easily bypassed, it is hard to trust the code stored in it. By the end of this chapter, you will have gained a solid understanding of the following key areas:
- Understanding the post-commit...
