Agile, CI/CD
Agile, CI/CD, and DevOps are three distinct methodologies for developing and delivering high-quality software. Read articles from Black Duck cyber security experts to learn how to implement these practices in your AppSec program.
50
Stories
17
Writers
Security automation and integration can smooth AppSec friction
Jan 23, 2025
|
6 min read
Overcome AST noise to find and fix software vulnerabilities
Jan 06, 2025
|
6 min read
Top 4 software development methodologies
Mar 24, 2024
|
5 min read
AppSec Decoded: Ease of use with Polaris
Jun 08, 2023
|
1 min read
Fast application security testing with the Polaris platform
Apr 25, 2023
|
3 min read
Polaris integrations: Secure development at the speed of business
Apr 18, 2023
|
3 min read
Polaris: Your no-compromise SaaS AST solution
Apr 03, 2023
|
4 min read
Secure SDLC 101: Mastering software development life cycle security
Aug 08, 2022
|
4 min read
Build developer trust with faster, accurate AppSec testing from Rapid Scan
Jul 27, 2021
|
2 min read
How to cyber security: Embedding security into every phase of the SDLC
Jun 28, 2021
|
3 min read
Top 10 DevSecOps best practices for building secure software
May 06, 2021
|
8 min read
How to integrate automated AST tools in your CI/CD pipeline
Feb 03, 2021
|
4 min read
How to cyber security: Faceplanting in 10 lines of code
Jan 20, 2021
|
7 min read
DevSecOps: The good, the bad, and the ugly
Dec 27, 2020
|
8 min read
How to cyber security: Software security is everyone’s responsibility
Dec 16, 2020
|
4 min read
Configure security tools for effective DevSecOps
Dec 02, 2020
|
6 min read
Can your security keep pace in a DevOps environment?
Nov 16, 2020
|
6 min read
How to cyber security: Gotta go fast … but why?
Nov 12, 2020
|
5 min read
Three DevSecOps challenges and how to mitigate them
Nov 09, 2020
|
3 min read
Get effective DevSecOps with version control
Oct 18, 2020
|
5 min read
How does IAST fit into DevSecOps?
Mar 10, 2020
|
3 min read
Synopsys adds GitHub Action for SAST and SCA
Jan 18, 2020
|
4 min read
Integrating Coverity Scan with GitLab CI
Nov 17, 2019
|
3 min read
CloudBees and Synopsys: Putting “Sec” into DevSecOps
Oct 09, 2019
|
2 min read
Seeker FAQ: Interactive application security testing and CI/CD
Oct 01, 2019
|
5 min read
Want to secure your apps? Build security in with the right toolchain
Mar 20, 2019
|
4 min read
How to “shift left” with application security tools, and how not to
Jan 30, 2019
|
2 min read
Automation: One of the keys to DevSecOps
Oct 11, 2018
|
3 min read
The intersection between IAST and SCA and why you need both in your security toolkit
Aug 28, 2018
|
3 min read
Securing applications with Coverity’s static analysis results
Aug 26, 2018
|
3 min read
Integrating Coverity static analysis into development workflows
Aug 19, 2018
|
2 min read
Common security challenges in CI/CD workflows
Jul 10, 2018
|
9 min read
5 DevSecOps essentials and how to achieve them
Jun 06, 2018
|
2 min read
How to integrate SAST into the DevSecOps pipeline in 5 simple steps
May 07, 2018
|
9 min read
8 takeaways from NIST’s Application Container Security Guide
Apr 30, 2018
|
4 min read
What’s the difference between agile, CI/CD, and DevOps?
Mar 18, 2018
|
3 min read
Is shadow engineering developing your applications?
Jan 19, 2018
|
1 min read
Manage security risk in GitHub open source projects with CoPilot
Jan 09, 2018
|
1 min read
It’s time to enlist Security Champions to fuel Agile development
Nov 15, 2017
|
2 min read
Streamlining development with a DevSecOps life cycle
Nov 13, 2017
|
2 min read
What is cloud-native container security?
Oct 14, 2017
|
3 min read
Black Duck and Google Grafeas: Improving container visibility and security
Oct 12, 2017
|
1 min read
Is threat modeling compatible with Agile and DevSecOps?
Jul 07, 2017
|
3 min read
Building your DevSecOps pipeline: 5 essential activities
Jul 06, 2017
|
8 min read
Introducing Black Duck CoPilot
Jun 12, 2017
|
3 min read
.NET component vulnerability analysis in production
May 07, 2017
|
2 min read
4 threat modeling questions to ask before your next Agile sprint
Jun 01, 2016
|
3 min read
Best practices for free and open source software vulnerability management
May 14, 2016
|
5 min read
5 essentials of cloud-based application security testing
Jan 14, 2016
|
2 min read