ConceptsDevSecOps Principles

DevSecOps Principles

The core ideas behind building security into software delivery: shift security left, automate it in the pipeline, share responsibility across dev, sec, and ops, give fast developer feedback, and treat security as a continuous part of building software.

Glossary definition

15 direct links6 lessons

Concept Neighborhood

Explore this concept’s connections in the groups below.

Start here

Container Image Scanning

A related concept to explore, covered by 6 lessons.

Open concept →

Relatedsorted by lesson coverage

Container Image ScanningStart here

lessons

Container Security Model

lessons

DAST in DevSecOps

lessons

Developer Security Feedback

lessons

Dockerfile Security

lessons

Engineering Security Champions

lessons

Show 9 more connections

IaC Security Scanning

lessons

Pipeline Security Architecture

lessons

SAST Implementation

lessons

Defense Evolution

lesson

Deployment Authorization

lesson

Detection Automation

lesson

Distributed Tracing for Security

lesson

Drift Management

lesson

eBPF-Based Observability

lesson

Related Lessons

6 lessons cover this concept

Secure Delivery as an Engineering System

Cloud Security Engineer

Code, Dependency, and Secret Analysis

Cloud Security Engineer

Container Artifacts, Sboms, and Provenance

Cloud Security Engineer

Infrastructure and Policy as Code

Cloud Security Engineer

Dynamic Testing and Runtime Signals

Cloud Security Engineer

Protecting Ci/Cd and Building Security Culture

Cloud Security Engineer