Loading...
Publication
ImplementaĆ§Ć£o de DevSecOps no processo CI/CD
| Name: | Description: | Size: | Format: | |
|---|---|---|---|---|
| 12.58 MB | Adobe PDF |
Authors
Advisor(s)
Abstract(s)
Esta dissertaĆ§Ć£o aborda a implementaĆ§Ć£o de prĆ”ticas DevSecOps no processo de integraĆ§Ć£o contĆnua e entrega/ implantaĆ§Ć£o contĆnua (CI/CD) na Natixis, com o objetivo de melhorar a seguranƧa e qualidade do software entregue. Ć data do inĆcio do projeto, as pipelines de CI/CD da Natixis nĆ£o integravam anĆ”lises automatizadas de qualidade e seguranƧa, aumentando a probabilidade de introduĆ§Ć£o de vulnerabilidades nos ambientes de produĆ§Ć£o. Esta dissertaĆ§Ć£o propĆ“s a implementaĆ§Ć£o de uma soluĆ§Ć£o que automatizasse a anĆ”lise de qualidade e seguranƧa ao longo do ciclo de desenvolvimento, minimizando riscos e aumentando a eficiĆŖncia operacional.
AtravĆ©s de uma anĆ”lise comparativa das ferramentas de anĆ”lise de cĆ³digo, seguranƧa e testes, foi sugerida uma soluĆ§Ć£o escalĆ”vel que pode ser aplicada de forma global Ć s vĆ”rias equipas da empresa, promovendo a integraĆ§Ć£o contĆnua de boas prĆ”ticas de seguranƧa no desenvolvimento. Os resultados observados incluem a reduĆ§Ć£o de vulnerabilidades em produĆ§Ć£o, melhoria na qualidade do cĆ³digo e maior agilidade no desenvolvimento de software seguro e eficiente.
This dissertation addresses the implementation of DevSecOps practices in the continuous integration and delivery (CI/CD) process at Natixis, with the aim of improving the security and quality of the software delivered. At the start of the project, Natixis' CI/CD pipelines didnāt integrate automated security and quality analysis, increasing the likelihood of vulnerabilities being introduced into production environments. This dissertation proposed the implementation of a solution that would automate quality and safety analysis throughout the development cycle, minimizing risks and increasing operational efficiency. Through a comparative analysis of code analysis, security and testing tools, a scalable solution was suggested that can be applied globally to the company's various teams, promoting the continuous integration of good security practices in development. The results observed included a reduction in vulnerabilities in production, an improvement in code quality and greater agility in the development of secure and efficient software.
This dissertation addresses the implementation of DevSecOps practices in the continuous integration and delivery (CI/CD) process at Natixis, with the aim of improving the security and quality of the software delivered. At the start of the project, Natixis' CI/CD pipelines didnāt integrate automated security and quality analysis, increasing the likelihood of vulnerabilities being introduced into production environments. This dissertation proposed the implementation of a solution that would automate quality and safety analysis throughout the development cycle, minimizing risks and increasing operational efficiency. Through a comparative analysis of code analysis, security and testing tools, a scalable solution was suggested that can be applied globally to the company's various teams, promoting the continuous integration of good security practices in development. The results observed included a reduction in vulnerabilities in production, an improvement in code quality and greater agility in the development of secure and efficient software.
Description
Keywords
DevSecOps CI/CD Cybersecurity Code Quality Pipeline Automation CiberseguranƧa Qualidade de cĆ³digo AutomaĆ§Ć£o de pipelines