This book24.4 x 17 x 1 cm9.61 x 6.69 x 0.39 in
Ship to
Taiwan
Select your location
Shipping costs will be calculated based on this address throughout the site.
Shipping costs will be calculated based on this address throughout the site.
Select your country
Americas
Argentina
Brazil
Canada
Chile
Colombia
Costa Rica
Dominican Republic
Ecuador
El Salvador
Mexico
Peru
U.S.A.
Uruguay
Europe
Austria
Belgium
Croatia
Czech Republic
Denmark
Finland
France
Germany
Greece
Hungary
Ireland
Italy
Latvia
Malta
Netherlands
Norway
Poland
Portugal
Serbia
Slovakia
Slovenia
Spain
Sweden
Switzerland
United Kingdom
Rest of the world
Automated Security Testing in DevOps. Designing, Integrating, and Scaling Secure CI/CD Pipelines for Modern Cloud-Native Applications
Kenneth A. Pena
Automated Security Testing in DevOps. Designing, Integrating, and Scaling Secure CI/CD Pipelines for Modern Cloud-Native Applications
Kenneth A. Pena (Author) · Independently published · Paperback
Automated Security Testing in DevOps. Designing, Integrating, and Scaling Secure CI/CD Pipelines for Modern Cloud-Native Applications
Kenneth A. Pena
Picture this: It's 2:00 AM on a Friday. A critical zero-day vulnerability just dropped in a popular open-source library. Hackers are already deploying automated bots to hunt for exposed servers.
Are you panicking? Are you frantically waking up your engineering team to manually dig through hundreds of repositories?
I've seen the devastating chaos of a compromised software supply chain. But I also know the absolute peace of mind that comes from a system that defends itself. I wrote this guide to give you that exact peace. Imagine a world where your pipeline automatically intercepts that zero-day, blocks the malicious build, and hands your developer a pre-written fix-all while you sleep soundly. That is the reality I am going to help you build.
What's insideI have packed this guide with highly practical, actionable blueprints. Inside, you'll discover:
The Assembly Line: Automate SAST, SCA, and SBOM generation to mathematically prove your source code is safe.Live Target Practice: Spin up ephemeral cloud environments to aggressively attack your live apps using DAST and IAST.Securing the Vault: Lock down container registries and deploy strict Kubernetes Admission Controllers.Guarding the Factory: Monitor your actual CI/CD runners for malicious network traffic and unauthorized modifications.The AI Frontier: Leverage AIOps for predictive pipeline routing, generative fuzzing, and automated remediation.Who it's meant forWhether you are a DevOps engineer tired of manual security gates, a software developer battling false positives, or a security architect tasked with protecting a massive enterprise, this book is for you. If you want to deploy code at the speed of light without sacrificing an ounce of safety, you are in the right place.
The attackers are already automating their exploits. It is time to automate your defense. Do not wait for a catastrophic breach to force your hand or ruin your reputation. Grab your copy today, and let's start building your impenetrable pipeline right now!Do you have a question about the book? Login to be able to add your own question.