Sorry, not available in this language yet

English
日本語

Agile, CI/CD

Agile, CI/CD, and DevOps are three distinct methodologies for developing and delivering high-quality software. Read articles from Black Duck cyber security experts to learn how to implement these practices in your AppSec program.

Stories

Writers

Top Writers

Black Duck Editorial Staff

Jonathan Knudsen

Taylor Armerding

Last Published

Jan 13, 2016 - Jan 24, 2025

Jan 23, 2025/6 min read

Security automation and integration can smooth AppSec friction

By Steven Zimmerman

Tags: Agile, CI/CD, Build Security into DevOps, DevSecOps

Jan 06, 2025/6 min read

Overcome AST noise to find and fix software vulnerabilities

By Steven Zimmerman

Tags: Agile, CI/CD, Build Security into DevOps, DevSecOps

Mar 24, 2024/5 min read

Top 4 software development methodologies

By Mike McGuire

Tags: Agile, CI/CD, Build Security into DevOps, DevSecOps

Jun 08, 2023/1 min read

AppSec Decoded: Ease of use with Polaris

By Black Duck Editorial Staff

Tags: Agile, CI/CD, DevSecOps

Polaris Platform Application Security Testing

Apr 25, 2023/3 min read

Fast application security testing with the Polaris platform

By Charlotte Freeman

Tags: Agile, CI/CD, DevSecOps, Manage Security Risks

Polaris Integrations for Secure Software Development

Apr 18, 2023/3 min read

Polaris integrations: Secure development at the speed of business

By Black Duck Editorial Staff

Tags: Agile, CI/CD, DevSecOps, Manage Security Risks

Apr 03, 2023/4 min read

Polaris: Your no-compromise SaaS AST solution

By Black Duck Editorial Staff

Tags: Agile, CI/CD, DevSecOps, Manage Security Risks

Aug 08, 2022/4 min read

Secure SDLC 101: Mastering software development life cycle security

By Charlotte Freeman

Tags: Agile, CI/CD, Program Strategy & Planning, Manage Security Risks

Rapid Scan AppSec Testing for Developers

Jul 27, 2021/2 min read

Build developer trust with faster, accurate AppSec testing from Rapid Scan

By Scott Johnson

Tags: SCA, Agile, CI/CD, Build Security into DevOps, SAST

Jun 28, 2021/3 min read

How to cyber security: Embedding security into every phase of the SDLC

By Jonathan Knudsen

Tags: Agile, CI/CD, Build Security into DevOps

May 06, 2021/8 min read

Top 10 DevSecOps best practices for building secure software

By Sneha Kokil

Tags: Agile, CI/CD, Build Security into DevOps, AppSec Best Practices, DevSecOps

Integrating Automated AST Tools in CI/CD

Feb 03, 2021/4 min read

How to integrate automated AST tools in your CI/CD pipeline

By Meera Rao

Tags: Agile, CI/CD, Build Security into DevOps

Jan 20, 2021/7 min read

How to cyber security: Faceplanting in 10 lines of code

By Jonathan Knudsen

Tags: Agile, CI/CD, Build Security into DevOps

DevSecOps Challenges And Benefits Overview

Dec 27, 2020/8 min read

DevSecOps: The good, the bad, and the ugly

By Nivedita Murthy

Tags: Agile, CI/CD, Build Security into DevOps

Dec 16, 2020/4 min read

How to cyber security: Software security is everyone’s responsibility

By Jonathan Knudsen

Tags: Agile, CI/CD, Manage Security Risks

Configuring Security Tools For DevSecOps

Dec 02, 2020/6 min read

Configure security tools for effective DevSecOps

By Taylor Armerding

Tags: Agile, CI/CD, Build Security into DevOps, DevSecOps

Man Standing Victorious in Keyhole Opening

Nov 16, 2020/6 min read

Can your security keep pace in a DevOps environment?

By Taylor Armerding

Tags: Agile, CI/CD, Manage Security Risks

DevSecOps Velocity Concept with Rocket Van

Nov 12, 2020/5 min read

How to cyber security: Gotta go fast … but why?

By Jonathan Knudsen

Tags: Agile, CI/CD, Build Security into DevOps, DevSecOps

Mitigating DevSecOps Challenges Illustration

Nov 09, 2020/3 min read

Three DevSecOps challenges and how to mitigate them

By Patrick Carey

Tags: Agile, CI/CD, Build Security into DevOps, Training, DevSecOps

Effective DevSecOps Version Control Strategies

Oct 18, 2020/5 min read

Get effective DevSecOps with version control

By Taylor Armerding

Tags: Agile, CI/CD, Build Security into DevOps, DevSecOps

IAST Integration in DevSecOps Application Security

Mar 10, 2020/3 min read

How does IAST fit into DevSecOps?

By Black Duck Editorial Staff

Tags: Agile, CI/CD, Build Security into DevOps, IAST, DevSecOps

Jan 18, 2020/4 min read

Synopsys adds GitHub Action for SAST and SCA

By Black Duck Editorial Staff

Tags: SCA, Agile, CI/CD, Build Security into DevOps, SAST

Nov 17, 2019/3 min read

Integrating Coverity Scan with GitLab CI

By Black Duck Editorial Staff

Tags: Agile, CI/CD, Build Security into DevOps, SAST

CloudBees Synopsys DevSecOps Collaboration Graphic

Oct 09, 2019/2 min read

CloudBees and Synopsys: Putting “Sec” into DevSecOps

By Black Duck Editorial Staff

Tags: Agile, CI/CD, Build Security into DevOps

Interactive Application Security Testing FAQ

Oct 01, 2019/5 min read

Seeker FAQ: Interactive application security testing and CI/CD

By Kimm Yeo

Tags: Agile, CI/CD, Security News & Trends, IAST

Application Security Toolchain Gears Image

Mar 20, 2019/4 min read

Want to secure your apps? Build security in with the right toolchain

By Taylor Armerding

Tags: Agile, CI/CD, Build Security into DevOps, Threat & Risk Assessment, Manage Security Risks

Jan 30, 2019/2 min read

How to “shift left” with application security tools, and how not to

By Black Duck Editorial Staff

Tags: Agile, CI/CD, Build Security into DevOps

Gears Representing Automation In DevSecOps

Oct 11, 2018/3 min read

Automation: One of the keys to DevSecOps

By Black Duck Editorial Staff

Tags: Agile, CI/CD, Program Strategy & Planning, DevSecOps, Manage Security Risks

Aug 28, 2018/3 min read

The intersection between IAST and SCA and why you need both in your security toolkit

By Tim Mackey

Tags: SCA, Agile, CI/CD, Build Security into DevOps, IAST, Manage Security Risks

Apache Software Licensing Security Analysis

Aug 26, 2018/3 min read

Securing applications with Coverity’s static analysis results

By Black Duck Editorial Staff

Tags: Agile, CI/CD, Security News & Trends, SAST

Cogs Representing Development Workflows Integration

Aug 19, 2018/2 min read

Integrating Coverity static analysis into development workflows

By Black Duck Editorial Staff

Tags: Agile, CI/CD, Build Security into DevOps, SAST

Jul 10, 2018/9 min read

Common security challenges in CI/CD workflows

By Meera Rao

Tags: Agile, CI/CD, SAST, Manage Security Risks

Intersection With Blurred Traffic Lights

Jun 06, 2018/2 min read

5 DevSecOps essentials and how to achieve them

By Black Duck Editorial Staff

Tags: Agile, CI/CD, Security News & Trends, DevSecOps

May 07, 2018/9 min read

How to integrate SAST into the DevSecOps pipeline in 5 simple steps

By Meera Rao

Tags: Agile, CI/CD, Build Security into DevOps, SAST, DevSecOps

Apr 30, 2018/4 min read

8 takeaways from NIST’s Application Container Security Guide

By Tim Mackey

Tags: Agile, CI/CD, Security News & Trends, Container Security

Mar 18, 2018/3 min read

What’s the difference between agile, CI/CD, and DevOps?

By John Steven

Tags: Agile, CI/CD, Build Security into DevOps

Shadow Engineering In Application Development

Jan 19, 2018/1 min read

Is shadow engineering developing your applications?

By Black Duck Editorial Staff

Tags: Agile, CI/CD, Security News & Trends

Jan 09, 2018/1 min read

Manage security risk in GitHub open source projects with CoPilot

By Black Duck Editorial Staff

Tags: Agile, CI/CD, Security News & Trends

Security Champions Boost Agile Development

Nov 15, 2017/2 min read

It’s time to enlist Security Champions to fuel Agile development

By Brendan Sheairs

Tags: Agile, CI/CD, Security News & Trends

Running Smoothly With DevSecOps Integration

Nov 13, 2017/2 min read

Streamlining development with a DevSecOps life cycle

By Apoorva Phadke

Tags: Agile, CI/CD, Build Security into DevOps, DevSecOps, Manage Security Risks

Oct 14, 2017/3 min read

What is cloud-native container security?

By Black Duck Editorial Staff

Tags: Agile, CI/CD, Security News & Trends, Cloud Security

Container Security and Visibility Enhancement Image

Oct 12, 2017/1 min read

Black Duck and Google Grafeas: Improving container visibility and security

By Black Duck Editorial Staff

Tags: SCA, Agile, CI/CD, Container Security

Jul 07, 2017/3 min read

Is threat modeling compatible with Agile and DevSecOps?

By Black Duck Editorial Staff

Tags: Agile, CI/CD, Threat Modeling, Manage Security Risks

Jul 06, 2017/8 min read

Building your DevSecOps pipeline: 5 essential activities

By Meera Rao

Tags: Agile, CI/CD, Build Security into DevOps

Cloud Security Blog Featuring Black Duck CoPilot

Jun 12, 2017/3 min read

Introducing Black Duck CoPilot

By Patrick Carey

Tags: Agile, CI/CD, Security News & Trends, Cloud Security

.NET Component Vulnerability Analysis Graphic

May 07, 2017/2 min read

.NET component vulnerability analysis in production

By Black Duck Editorial Staff

Tags: Agile, CI/CD, Security News & Trends

Jun 01, 2016/3 min read

4 threat modeling questions to ask before your next Agile sprint

By Black Duck Editorial Staff

Tags: Agile, CI/CD, Threat Modeling, Manage Security Risks

May 14, 2016/5 min read

Best practices for free and open source software vulnerability management

By Black Duck Editorial Staff

Tags: Agile, CI/CD, AppSec Best Practices

Jan 14, 2016/2 min read

5 essentials of cloud-based application security testing

By Black Duck Editorial Staff

Tags: Agile, CI/CD, Cloud Security, Manage Security Risks

1 2 3 4 5

Stories

Writers

Top Writers

Black Duck Editorial Staff

Jonathan Knudsen

Taylor Armerding

Last Published

Jan 13, 2016 - Jan 24, 2025