DevSecOps Implementation

Farhan Ahmad

Cloud Infrastructure Architect
DevOps Engineer
AWS
Azure DevOps
Terraform

Use Case

Automate CI pipelines using generic template in Azure DevOps: Build process has been automated using the generic template structure that helps to separate the core pipeline logic, makes the pipeline code reusable, and integrate with any other CI tools easily.
SAST/DAST tools Integration: From a DevSecOps principle, this application makes use of various tools like SonarQube, White source, Checkmarks within our CI pipelines for developers to be informed of the code quality during build process.
Monitoring standardization: It uses Azure monitoring tool to monitor and determine the application performance metrics as well as event monitoring for the applications, infrastructure, and cloud services. Mail alerts has been setup in case of Virtual Machine issues like Disk Space

Solution

Ø Branching strategy –Branching strategy of feature branch-based development to begin with, once code is hardened then same code is pushed to develop branch for Dev and QA environment’s deployments, once code is validated to be working as expected by QA team code is merged to release branch for higher environments deployments.
Ø SAST/DAST tools – From a DevSecOps principle, various tools like SonarQube, White source, Checkmarks has been integrated within our CI pipelines for developers to be informed of the code quality during build.
Ø Build and Release Pipeline for Angular, .Net, SQL, Function App and VM API
Partner With Farhan
View Services

More Projects by Farhan