Securing Your Delivery

We have now arrived at the final step in building secure software—the secure assemblage and delivery of your code. In recent years, the SDLC has seen a major revolution in the way organizations produce and deliver modern software—the rise of DevOps, powered in large part, thanks to the new capacities offered by the cloud. Combined with the rise of the Agile methodology, this has allowed efforts to focus on applying automation to key stages of the SDLC. The result is a faster, higher-quality development cycle, leading to much higher value delivered to end users.

That said, software delivery is a complex process that presents its own risks. Events such as the massive breach at Equifax and the more recent SolarWinds incident have shown that even established companies with advanced security practices are susceptible to attacks.

In this chapter, we will focus on the final step of the SDLC, which involves continuous integration and continuous delivery...