Implementation of Continuous Deployment is always a challenge for any organizations. It is always hard to trust completely to the algorithms and tests suites which are telling that there are no problem with released software so it is good to be shared with a wider audience.

The same thing is with security. While building automated algorithms which are deciding wether deploy an application or no, security aspect should be one of a factors driving that decision.

CICD pipeline with Security Checks

Security Quality gateway is configurable element which return:

  • OK if there are scans configured and no critical vulnerability found
  • NOT OK – if there are some of the scans missing or there is a critical vulnerability found

Read more at Mixeway documentation https://mixeway.github.io/