As we discussed in Chapter 12, Security in the DevOps Process with DevSecOps, security and compliance analyses must be part of DevOps processes. However, in companies, there is often a lack of awareness among development teams about security rules and this is why security is implemented too late in DevOps processes.
To integrate security into processes, it is, therefore, necessary to raise awareness among developers of aspects of application code security, but also of the protection of CI/CD pipeline configuration.
In addition, it is also necessary to eliminate the barrier between DevOps and security, by integrating security teams more often into the various meetings that bring together Developer and Operational teams, thus ensuring better consistency between developers, operational team, and also security. Regarding the choice of tools, do not...