Книги и журналы » Компьютерная литература » Программирование (книги)
Mastering DevSecOpsГод издания: 2026
Автор: Bhardwaj A.
Издательство: Apress
ISBN: 979-8-8688-3228-4
Язык: Английский
Формат: PDF (conv.)/EPUB
Качество: Издательский макет или текст (eBook)
Интерактивное оглавление: Да
Количество страниц: 450
Описание: Modern software delivery demands more than speed. It requires security to be built into every stage of the development lifecycle. As organizations embrace cloud-native architectures, Kubernetes, Infrastructure as Code, and AI-powered development, protecting the software supply chain has become one of the most critical challenges facing engineering teams.
This book provides a practical, enterprise-focused guide to designing, implementing, and operating secure software delivery pipelines from code to cloud. Rather than treating security as a final checkpoint, this book demonstrates how security can be integrated throughout the CI/CD lifecycle using Zero-Trust principles, policy-as-code, automated security testing, software supply chain protection, and continuous compliance.
You will learn how to secure source code repositories, manage secrets, protect build pipelines, validate software artifacts, generate and verify SBOMs, harden Kubernetes workloads, and secure cloud-native deployments. The book also explores AI-driven security automation, runtime threat detection, behavioral analytics, and self-healing pipelines capable of automatically detecting, containing, and recovering from security incidents.
Drawing from real enterprise experience, practical architectures, and current industry best practices, this book equips DevOps engineers, security professionals, cloud architects, and technology leaders with the knowledge needed to build secure, scalable, and resilient software delivery platforms for modern organizations.
Whether you are beginning your DevSecOps journey or leading enterprise transformation initiatives, this book provides the architectural guidance and practical techniques needed to secure software delivery at production scale.
What You Will Learn:
- Design and build CI/CD pipelines that follow Zero-Trust principles
- Secure source code repositories, secrets, identities, and development workflows
- Implement SAST, DAST, SCA, SBOM generation, and artifact signing within CI/CD pipelines
- Protect software supply chains using cryptographic verification and policy enforcement
- Design enterprise-grade DevSecOps architectures for regulated environments.
- Implement governance, compliance, and continuous security validation at scale
[spoiler="Примеры страниц (скриншоты)"]
[spoiler="EPUB"]

[/spoiler]
[/spoiler]
[spoiler="Оглавление"]
Chapter 1: Introduction to Modern DevSecOps
Chapter 2: Foundations of Secure Software Delivery
Chapter 3: Zero-Trust CI/ CD Architecture
Chapter 4: Secure Source Code and Version Control
Chapter 5: CI Pipeline Security and Vulnerability Prevention
Chapter 6: CD Pipeline Security and Cloud Deployment Controls
Chapter 7: Kubernetes and Container Security
Chapter 8: Software Supply Chain Security
Chapter 9: Runtime Threat Detection and Response
Chapter 10: AI-Driven Security Automation
Chapter 11: Self-Healing DevSecOps Pipelines
Chapter 12: Governance, Compliance, and Enterprise Controls
Bibliography
List of Acronyms
Index
[/spoiler]