Embracing IaC Through the DevSecOps Philosophy: Concepts, Challenges, and a Reference Framework
Juncal Alonso, Radosław Piliszek, Matija Cankar · IEEE Software · 2022
We introduce the challenges of DevSecOps philosophy and its applicability to the development and operation of trustworthy infrastructure-as-code, and we combine the solutions into a single framework covering all crucial steps. Finally, we discuss how the proposed framework addresses the challenges and introduce an initial design for it.