DevSecOps

Domain 12 - Panduan mengintegrasikan keamanan ke dalam setiap fase siklus pengembangan perangkat lunak: dari perencanaan hingga deployment dan operasi.

Sub-Domain

• 12.1 Secure SDLC - SDLC, Threat Modeling
• 12.2 Code Security - SAST, DAST, SCA, Secret Scanning
• 12.3 CI/CD Security - GitHub Actions, GitLab CI, Pipeline Security
• 12.4 Infrastructure as Code - Terraform Security, IaC Scanning
• 12.5 Supply Chain Security - SBOM, Dependency Management