Shift-left approach for testing and security
A shift-left approach should be adopted early in the development life cycle of microservices applications. In a shift-left approach, you bring different activities (security, testing) into the development cycle earlier on to improve the quality of the application.
For example, if you are building a new application, you should test the security of the application in the design phase, by using tools such as Microsoft Threat Modeling. Moving forward, during development, the code should be security scanned using static application security testing (SAST), and furthermore, when the application is deployed, it should be tested using dynamic application security testing (DAST) tools.
The following aspects are important to consider when evaluating this factor:
- Do you follow a practice of implementing unit tests?
- Do you follow a practice of evaluating your architecture at the design phase?
- Do you have any tools to measure...
