Log in

Relevant bibliographies by topics / CI/CD Security / Journal articles

To see the other types of publications on this topic, follow the link: CI/CD Security.

Journal articles on the topic 'CI/CD Security'

Author: Grafiati

Published: 21 September 2024

Last updated: 26 July 2025

Create a spot-on reference in APA, MLA, Chicago, Harvard, and other styles

Select a source type:

Consult the top 50 journal articles for your research on the topic 'CI/CD Security.'

Next to every source in the list of references, there is an 'Add to bibliography' button. Press on it, and we will generate automatically the bibliographic reference to the chosen work in the citation style you need: APA, MLA, Harvard, Chicago, Vancouver, etc.

You can also download the full text of the academic publication as pdf and read online its abstract whenever available in the metadata.

Browse journal articles on a wide variety of disciplines and organise your bibliography correctly.

1

Malipeddi, Anil Kumar, and Sreekanth Pasunuru. "Securing DevOps CI/CD pipelines with Agent-Based and Agentless Solutions." INTERANTIONAL JOURNAL OF SCIENTIFIC RESEARCH IN ENGINEERING AND MANAGEMENT 08, no. 12 (2024): 1–7. https://doi.org/10.55041/isjem01319.

Full text

Abstract:

As organizations increasingly adopt containerized applications and Continuous Integration/Continuous Deployment (CI/CD) pipelines, managing and securing secrets becomes critical to maintaining robust security. CI/CD pipelines are critical to modern software development, enabling rapid delivery of software updates. However, these pipelines often handle sensitive secrets such as credentials, API keys, and tokens, making them an attractive target for adversaries. This paper explores two distinct approaches to secrets management in DevOps environments: agent- based solutions, such as CyberArk Cred

APA, Harvard, Vancouver, ISO, and other styles

2

Researcher. "SECURING CI/CD PIPELINES: STRATEGIES FOR MITIGATING RISKS IN MODERN SOFTWARE DELIVERY." International Journal of Engineering and Technology Research (IJETR) 9, no. 2 (2024): 1–9. https://doi.org/10.5281/zenodo.13365012.

Full text

Abstract:

This comprehensive article explores the critical challenge of securing Continuous Integration and Continuous Deployment (CI/CD) pipelines in modern software development. It addresses the common security threats faced by organizations, including credential leaks, supply chain attacks, and unauthorized access, while offering actionable strategies to mitigate these risks. The paper delves into best practices for enhancing CI/CD security, covering crucial aspects such as secret management, encryption techniques, secure CI/CD tools, immutable infrastructure, and comprehensive security testing metho

APA, Harvard, Vancouver, ISO, and other styles

3

Ravi, Chandra Thota. "Cloud-Native DevSecOps: Integrating Security Automation into CI/CD Pipelines." INTERNATIONAL JOURNAL OF INNOVATIVE RESEARCH AND CREATIVE TECHNOLOGY 10, no. 6 (2024): 1–19. https://doi.org/10.5281/zenodo.15036934.

Full text

Abstract:

As software has become deployed more rapidly in the current fast pace of software development, security has become important, particularly in cloud-native environments where CI/CD pipelines play an important role in operations. Many ways we use to secure traditional systems do not keep up with the fluidity and the fact that they are automated in modern DevOps workflows. As a result, DevSecOps—combining security with the DevOps process—has become the key strategy to maintain the software's security while retaining speed and agility. This article discusses how security automation can

APA, Harvard, Vancouver, ISO, and other styles

4

Ho-Dac, Hung, and Van-Len Vo. "An Approach to Enhance CI/CD Pipeline with Open-Source Security Tools." European Modern Studies Journal 8, no. 3 (2024): 408–13. http://dx.doi.org/10.59573/emsj.8(3).2024.30.

Full text

Abstract:

Continuous Integration (CI) and Continuous Deployment (CD) are important aspects in software engineering today. In modern software production organizational models, CI/CD pipeline has become a mandatory element to improve speed and reduce team effort in developing, integrating, and deploying. In the context of increasing information security risks, deploying security tools for the CI/CD pipeline has become an inevitable trend. Deploying information security tools throughout the pipeline according to the "Shift Left" philosophy will help detect information security issues early for timely handl

APA, Harvard, Vancouver, ISO, and other styles

5

Sumanth Kadulla. "Zero trust in cloud infrastructure: Implementing secure CI/CD Pipelines." World Journal of Advanced Research and Reviews 26, no. 2 (2025): 450–57. https://doi.org/10.30574/wjarr.2025.26.2.1662.

Full text

Abstract:

Zero Trust architecture represents a fundamental shift in securing cloud infrastructure, particularly within CI/CD pipelines where traditional perimeter-based security approaches increasingly fail against sophisticated threats. This technical article explores how implementing Zero Trust principles—"never trust, always verify"—creates robust protection throughout the software delivery lifecycle. The implementation spans across multiple dimensions: securing modern CI/CD tools including GitHub Actions, Azure DevOps, and GitLab; establishing comprehensive identity and access management with just-i

APA, Harvard, Vancouver, ISO, and other styles

6

Kamalakar, Reddy Ponaka. "Secure Secret Management in DevOps CI/CD Pipelines." European Journal of Advances in Engineering and Technology 7, no. 2 (2020): 73–76. https://doi.org/10.5281/zenodo.13919341.

Full text

Abstract:

As organizations increasingly adopt DevOps practices, the security of sensitive data such as secrets, API keys, and credentials becomes a significant concern. Continuous Integration and Continuous Deployment (CI/CD) pipelines automate software development but also require robust secret management. This paper presents an approach for securely managing secrets using JWT authentication between GitLab CI and HashiCorp Vault, providing a scalable, fine-grained, and secure solution for modern DevOps environments.

APA, Harvard, Vancouver, ISO, and other styles

7

Ponaka, Kamalakar Reddy. "Systematic Approach to Prevent Code Vulnerabilities using CI/CD Pipelines." INTERANTIONAL JOURNAL OF SCIENTIFIC RESEARCH IN ENGINEERING AND MANAGEMENT 08, no. 11 (2024): 1–6. http://dx.doi.org/10.55041/ijsrem7171.

Full text

Abstract:

This paper discusses a systematic approach to integrating Static Application Security Testing (SAST), Software Composition Analysis (SCA), Code Coverage, and Code Quality Checks into Continuous Integration/Continuous Delivery (CI/CD) pipelines. Modern CI/CD pipelines accelerate software delivery but introduce significant security and quality challenges. By incorporating SAST and SCA for security testing, along with code coverage and quality checks, organizations can prevent code vulnerabilities and ensure the maintainability and reliability of their applications. This approach helps developmen

APA, Harvard, Vancouver, ISO, and other styles

8

Sarathe Krisshnan Jutoo Vijayaraghavan. "Security as code: Transforming DevSecOps through CI/CD Integration." World Journal of Advanced Engineering Technology and Sciences 15, no. 1 (2025): 2219–25. https://doi.org/10.30574/wjaets.2025.15.1.0446.

Full text

Abstract:

Security as Code (Sac) represents a transformative approach to addressing the critical challenge of balancing rapid software delivery with robust security measures. By embedding security directly into continuous integration and continuous deployment pipelines, Sac enables organizations to automate, standardize, and scale security practices throughout the software development lifecycle. This integration transforms security from a bottleneck into an enabler of development velocity while significantly enhancing risk posture. The article explores the theoretical framework of Sac, including its fou

APA, Harvard, Vancouver, ISO, and other styles

9

Baladari, Venkata. "End-to-End CI/CD Deployment of RESTful Microservices in the Cloud." International Journal of Core Engineering and Management 6, no. 8 (2020): 262–68. https://doi.org/10.5281/zenodo.15020514.

Full text

Abstract:

Implementing RESTful microservices across various cloud platforms necessitates automation to guarantee consistency, security, and scalability. Continuous Integration/Continuous Deployment (CI/CD) pipelines optimize the integration, testing, and deployment of services, thereby minimizing manual intervention and operational risks. This study introduces a comprehensive framework for fully automated CI/CD processes, integrating Infrastructure as Code (IaC), security protocols, and monitoring software solutions. The proposal tackles crucial issues like multi-cloud compatibility, vendor lock-in, and

APA, Harvard, Vancouver, ISO, and other styles

10

Akilnath, Bodipudi. "Integrating Vulnerability Scanning with Continuous Integration/Continuous Deployment (CI/CD) Pipelines." European Journal of Advances in Engineering and Technology 9, no. 2 (2022): 49–55. https://doi.org/10.5281/zenodo.13622978.

Full text

Abstract:

In the era of DevOps, the integration of Continuous Integration and Continuous Deployment (CI/CD) pipelines has revolutionized the software development lifecycle, ensuring rapid and reliable delivery of applications. However, this accelerated development pace introduces significant security challenges, particularly in maintaining the security posture of local servers. This paper investigates the integration of vulnerability scanning into CI/CD pipelines, aiming to enhance the security of applications and underlying infrastructure throughout the development process. We explore various vulnerabi

APA, Harvard, Vancouver, ISO, and other styles

11

Rohith Aitharaju. "Policy-driven infrastructure hardening using CI/CD pipelines in enterprise environments." International Journal of Science and Research Archive 7, no. 1 (2022): 591–602. https://doi.org/10.30574/ijsra.2022.7.1.0280.

Full text

Abstract:

The way modern businesses are speeding up software implementation using CI/CD, securely managing infrastructure automatically has never been more essential. Old methods of protecting systems, made by hand and only done when problems arise, cannot catch up to what DevOps pipelines require. This research looks at using Policy-as-Code (PaC) in CI/CD pipelines to apply policy-driven hardening to infrastructure which helps maintain compliance, consistency and robustness. The research further examines basic ideas like Infrastructure as Code (IaC), managing configurations and the important security b

APA, Harvard, Vancouver, ISO, and other styles

12

Devashish Ghanshyambhai Patel. "Enhancing CI/CD security with provenance metadata and supply chain best practices." World Journal of Advanced Engineering Technology and Sciences 16, no. 1 (2025): 019–32. https://doi.org/10.30574/wjaets.2025.16.1.1181.

Full text

Abstract:

Continuous Integration and Continuous Delivery (CI/CD) pipelines have transformed modern software development by enabling faster release cycles, increased collaboration, and improved automation. However, these benefits also introduce complex security challenges, particularly within software supply chains. As the sophistication of cyber threats evolves, adversaries are increasingly targeting CI/CD environments to infiltrate trusted software delivery processes. This journal article presents a comprehensive exploration of how integrating provenance metadata and adopting supply chain security best

APA, Harvard, Vancouver, ISO, and other styles

13

Satya Praveen Kumar, Naga. "Integrating Dynamic Security Testing Tools into CI/CD Pipelines: A Continuous Security Testing Case Study." International Journal of Science and Research (IJSR) 10, no. 4 (2021): 1403–5. http://dx.doi.org/10.21275/sr24615152732.

Full text

APA, Harvard, Vancouver, ISO, and other styles

14

Samuel Jesupelumi Owoade, Abel Uzoka, Joshua Idowu Akerele, and Pascal Ugochukwu Ojukwu. "Cloud-based compliance and data security solutions in financial applications using CI/CD pipelines." World Journal of Engineering and Technology Research 3, no. 2 (2024): 011–21. http://dx.doi.org/10.53346/wjetr.2024.3.2.0059.

Full text

Abstract:

In the fast-evolving landscape of financial services, data security and regulatory compliance are critical challenges that cloud-based solutions can address effectively. This paper explores the implementation of cloud-based compliance and data security solutions in financial applications, with a specific focus on using Continuous Integration and Continuous Deployment (CI/CD) pipelines. By integrating CI/CD pipelines, financial institutions can streamline deployment processes, ensuring rapid delivery while maintaining compliance with regulatory frameworks such as GDPR, PCI-DSS, and SOC 2. The C

APA, Harvard, Vancouver, ISO, and other styles

15

Dachepally, Raju. "Continuous Integration and Continuous Delivery (CI/CD) Pipelines: Best Practices for Modern Enterprises." INTERANTIONAL JOURNAL OF SCIENTIFIC RESEARCH IN ENGINEERING AND MANAGEMENT 05, no. 10 (2021): 1–8. https://doi.org/10.55041/ijsrem10912.

Full text

Abstract:

Continuous Integration (CI) and Continuous Delivery (CD) pipelines have become indispensable for modern enterprises aiming to achieve agile and scalable software development. This paper explores best practices for designing and implementing robust CI/CD pipelines, focusing on efficiency, security, and scalability. Key strategies include automated testing, pipeline as code, and integrating security measures. The paper features diagrams, flowcharts, and pseudocode to provide actionable insights. Future trends and challenges in CI/CD adoption are also discussed. Keywords CI/CD Pipelines, Automati

APA, Harvard, Vancouver, ISO, and other styles

16

Singh, Nikhil. "CI/CD Pipeline for Web Applications." International Journal for Research in Applied Science and Engineering Technology 11, no. 5 (2023): 5218–26. http://dx.doi.org/10.22214/ijraset.2023.52867.

Full text

Abstract:

Abstract: Modern organisation’s rapid pace of software development necessitates teams delivering high-quality software products faster than ever before. In order to accomplish this, software development teams are incorporating continuous integration and continuous deployment (CI/CD) methodologies into their software development processes. CI/CD pipelines are a set of practises and tools that allow teams to efficiently and reliably automate the development, testing, and deployment of software products. CI/CD pipelines have become an essential tool for teams delivering web applications at a fast

APA, Harvard, Vancouver, ISO, and other styles

17

Allam, Hitesh. "Security-Driven Pipelines: Embedding DevSecOps into CI/CD Workflows." International Journal of Emerging Trends in Computer Science and Information Technology 3, no. 1 (2022): 86–97. https://doi.org/10.63282/3050-9246.ijetcsit-v3i1p110.

Full text

APA, Harvard, Vancouver, ISO, and other styles

18

Chava, Ajay. "CI/CD and Automation in DevOps Engineering." Asian Journal of Research in Computer Science 17, no. 11 (2024): 73–80. http://dx.doi.org/10.9734/ajrcos/2024/v17i11520.

Full text

Abstract:

The article examines the principles and best practices of implementing Continuous Integration and Continuous Deployment (CI/CD) within DevOps engineering. It explores how CI/CD pipelines, automated testing, version control, and deployment processes can accelerate software development and improve product quality. The manuscript analyzes key tools such as Jenkins, GitLab, and Travis CI, and discusses critical security measures for safeguarding code and infrastructure. By integrating CI/CD into DevOps workflows, teams can enhance efficiency, reduce time to market, and minimize errors, all while e

APA, Harvard, Vancouver, ISO, and other styles

19

ADEDAMOLA ABIODUN SOLANKE. "Enterprise DevSecOps: Integrating security into CI/CD pipelines for regulated industries." World Journal of Advanced Research and Reviews 13, no. 2 (2022): 633–48. https://doi.org/10.30574/wjarr.2022.13.2.0121.

Full text

Abstract:

As organizations considered upscaling their DevOps adoption for speedy software delivery, it became imperative to integrate security into the CI/CD pipeline. The urgency of this practice cannot be overstated. Security should be embraced at every stage of the software development life cycle if only to meet compliance requirements in its strictest sense, especially where such requirements apply in industries like healthcare, finance, and government. DevSecOps turns the whole perspective toward incorporating security from Day 1 of the development cycle; that is, security is integrated and thus is

APA, Harvard, Vancouver, ISO, and other styles

20

Ponaka, Kamalakar Reddy. "Shift-left approach for Vulnerability Management in SDLC." INTERANTIONAL JOURNAL OF SCIENTIFIC RESEARCH IN ENGINEERING AND MANAGEMENT 08, no. 10 (2024): 1–14. http://dx.doi.org/10.55041/ijsrem9417.

Full text

Abstract:

Security vulnerabilities in software development can lead to severe risks if not addressed promptly. By adopting a shift-left approach and implementing gating mechanisms in Continuous Integration/Continuous Delivery (CI/CD) pipelines, organizations can mitigate the impact of high and critical vulnerabilities early in the Software Development Life Cycle (SDLC). This paper discusses a practical methodology for integrating security gates into the CI/CD pipeline to prevent the release of software with critical security flaws. Keywords —Vulnerability Management, Shift-Left Security, CI/CD Pipeline,

APA, Harvard, Vancouver, ISO, and other styles

21

Chirag, Amrutlal Pethad. "Design and Build a CI/CD pipeline for Salesforce." European Journal of Advances in Engineering and Technology 8, no. 6 (2021): 136–46. https://doi.org/10.5281/zenodo.13919671.

Full text

Abstract:

The document outlines the detailed steps to establish a robust CI/CD pipeline for Salesforce, integrate version control, automate testing, and deployment tools. It outlines the Salesforce Deployment capabilities, and its limitations. Key features of Jenkins, its benefits in implementing a CICD pipeline for Salesforce. Best practices include using scratch orgs for development, maintaining a clean codebase, implementing a branching strategy, and automating deployments with CI tools like Jenkins. Ensure security and compliance by managing credentials securely and reviewing permissions. Monitor de

APA, Harvard, Vancouver, ISO, and other styles

22

Ratnangi, Nirek. "Challenges and Solutions for Implementing CI/CD Pipelines in Linux-Based Development Frameworks." Journal of Scientific and Engineering Research 6, no. 6 (2019): 229–32. https://doi.org/10.5281/zenodo.13918897.

Full text

Abstract:

Continuous Integration (CI) and Continuous Deployment (CD) are critical methodologies in modern software development, enabling rapid and automated testing, integration, and deployment of code. Linux-based development environments, known for their flexibility, stability, and security, are popular in the software development community. However, the implementation of CI/CD pipelines in such environments brings about numerous challenges, including dependency management, security concerns, tool compatibility, and scalability.

APA, Harvard, Vancouver, ISO, and other styles

23

Vivek, Jain. "Continuous Testing in CI/CD Pipelines." INTERNATIONAL JOURNAL OF INNOVATIVE RESEARCH AND CREATIVE TECHNOLOGY 9, no. 1 (2023): 1–7. https://doi.org/10.5281/zenodo.14883221.

Full text

Abstract:

The rapid evolution of software development methodologies has placed increasing emphasis on the need for efficiency, reliability, and speed in delivering high-quality applications. Continuous Integration and Continuous Deployment (CI/CD) have become fundamental in modern DevOps practices, enabling seamless and frequent software releases. At the heart of this automation-driven approach lies Continuous Testing (CT), a critical process that ensures software quality by verifying each code change before deployment. Unlike traditional testing methods that occur later in the development lifecycle, Co

APA, Harvard, Vancouver, ISO, and other styles

24

Vamsi, Krishna Thatikonda. "Beyond the Buzz: A Journey Through CI/CD Principles and Best Practices." European Jornal of Theoretical and Sciences 1, no. 5 (2023): 334–40. https://doi.org/10.59324/ejtas.2023.1(5).24.

Full text

Abstract:

Continuous Integration and Continuous Deployment (CI/CD) are pivotal in modern software development. Shifting from the classic waterfall models, the current age is dominated by Agile methodologies and DevOps practices. This article explores CI and CD's core principles, differences, and similarities. It touches upon essential techniques such as automation, ensuring consistency, and the importance of quick feedback mechanisms. Beyond these, the discussion extends to cutting-edge methods, infrastructure as code, potential security considerations, and monitoring within CI/CD environments. Whil

APA, Harvard, Vancouver, ISO, and other styles

25

Ameta, Upasana, and Ruchi Vyas. "Application Deployment Automation by Streamlining CI/CD Pipelines." Asian Journal of Engineering and Applied Technology 12, no. 1 (2023): 23–27. http://dx.doi.org/10.51983/ajeat-2023.12.1.3598.

Full text

Abstract:

Conceptualize a scenario where the development, actions, quality affirmation, and information surveillance teams collaborate with the product owners to guarantee that the organisation achieves its goals for profitability, security, and cost-cutting. Together, they achieve world-class stability, reliability, availability, and security while conducting multiple number of code deployments each day. This enables the quick progress of planned work into creation. The testing of apps and InfoSec operations only take place at the conclusion of a project when it is too late to make any corrections. Dev

APA, Harvard, Vancouver, ISO, and other styles

26

Rahul Chowdary Bondalapati, Lakshmi Apoorwa Kumpatla, and Suvarna Rekha Karumanchi. "Secure-by-Design CI/CD Pipelines: A Zero Trust Framework for Cloud-Native Deployment Automation." Journal of Computer Science and Technology Studies 7, no. 5 (2025): 211–19. https://doi.org/10.32996/jcsts.2025.7.5.27.

Full text

Abstract:

The rapid evolution of cloud-native architectures and continuous deployment practices necessitates a fundamental shift in securing CI/CD pipelines. A novel zero trust framework introduces security controls as first-class entities within pipeline architecture, enforcing continuous verification throughout the software delivery lifecycle. The framework leverages policy-as-code, ephemeral build environments, and cryptographically verified artifact provenance to establish tamper-proof supply chains. Case studies demonstrate significant reductions in security incidents while improving deployment eff

APA, Harvard, Vancouver, ISO, and other styles

27

Reddy Pothu, Avinash. "Garlic Gate: Revolutionizing Application Security with Integrated Artificial Intelligence (AI) Across SDLC, CI/CD, and Advanced Methodologies." FMDB Transactions on Sustainable Computing Systems 2, no. 3 (2024): 119–30. https://doi.org/10.69888/ftscs.2024.000259.

Full text

Abstract:

Application security has become a top priority in SDLCs and CI/CD pipelines as cyber threats grow increasingly sophisticated. Meet Garlic Gate, a state-of-the-art, machine learning-powered framework that integrates effortlessly with SDLC and CI/CD processes to protect your applications. Its advanced architecture is designed to adapt to changing vulnerabilities, offering real-time threat detection, risk assessment, and dynamic learning to prevent or mitigate security issues. Using AI-driven algorithms, Garlic Gate overcomes the challenges of traditional application security methods, such as ine

APA, Harvard, Vancouver, ISO, and other styles

28

Naga Murali Krishna Koneru. "Integrating Security into CI/CD Pipelines: A DevSecOps Approach with SAST, DAST, and SCA Tools." International Journal of Science and Research Archive 3, no. 1 (2021): 250–65. https://doi.org/10.30574/ijsra.2021.3.1.0080.

Full text

Abstract:

Continuous Integration and Continuous Deployment (CI/CD), which was rapidly adopted by the software development industry, turned into a fast-paced process, causing new insecurity to be generated. This paper explains how we support the implementation of such DevSecOps by SDI (merging security in SD) with CI/CD process by combining SDI instruments of Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) and Software Composition Analysis (SCA) instruments. In this manner, security measures maintain equal development speed during development, while vulnerabilit

APA, Harvard, Vancouver, ISO, and other styles

29

Thatikonda, Vamsi Krishna. "Beyond the Buzz: A Journey Through CI/CD Principles and Best Practices." European Journal of Theoretical and Applied Sciences 1, no. 5 (2023): 334–40. http://dx.doi.org/10.59324/ejtas.2023.1(5).24.

Full text

Abstract:

Continuous Integration and Continuous Deployment (CI/CD) are pivotal in modern software development. Shifting from the classic waterfall models, the current age is dominated by Agile methodologies and DevOps practices. This article explores CI and CD's core principles, differences, and similarities. It touches upon essential techniques such as automation, ensuring consistency, and the importance of quick feedback mechanisms. Beyond these, the discussion extends to cutting-edge methods, infrastructure as code, potential security considerations, and monitoring within CI/CD environments. While CI

APA, Harvard, Vancouver, ISO, and other styles

30

Bhardwaj, Arvind Kumar, P. K. Dutta, and Pradeep Chintale. "Securing Container Images through Automated Vulnerability Detection in Shift-Left CI/CD Pipelines." Babylonian Journal of Networking 2024 (August 20, 2024): 162–70. http://dx.doi.org/10.58496/bjn/2024/016.

Full text

Abstract:

Integrating shift-left security practices and automated vulnerability detection in container images is imperative for modern software development, given the dynamics and vulnerability landscape. This crucial methodology emphasizes security from the initial stages of integration in container-based environments like Docker and Kubernetes. The paper examines containerization security challenges, including image vulnerabilities, insecure configurations, runtime risks, weak orchestration security, and supply chain weaknesses, while stressing compliance with regulatory rules. It explores how this au

APA, Harvard, Vancouver, ISO, and other styles

31

Koneru, Naga Murali Krishna. "Optimizing CI/CD Pipelines for Multi-Cloud Environments: Strategies for AWS and Azure Integration." Eastasouth Journal of Information System and Computer Science 2, no. 03 (2025): 288–310. https://doi.org/10.58812/esiscs.v2i03.534.

Full text

Abstract:

CI/CD pipelines are essential for modern software development to speed up application delivery and ensure reliability. However, organizations experience considerable management difficulties when they operate Continuous Integration and Deployment workflows between AWS and Azure. The research discusses multiple approaches to optimizing CI/CD pipelines and demonstrates their integration between AWS and Azure systems. The complete implementation guidelines within the method include selecting tools and best practices along with the necessary architectural elements to construct secure, scalable, and

APA, Harvard, Vancouver, ISO, and other styles

32

David Akokodaripon and Godwin Nzeako. "Enhancing data engineering workflows with CI/CD process optimization using terraform: Reducing deployment time and operational overhead." World Journal of Advanced Research and Reviews 19, no. 3 (2023): 1639–46. https://doi.org/10.30574/wjarr.2023.19.3.1795.

Full text

Abstract:

This study explores the optimization of data engineering workflows through the integration of Continuous Integration and Continuous Deployment (CI/CD) practices, utilizing Terraform to reduce deployment time and operational overhead. The purpose of the research is to examine how Terraform's Infrastructure as Code (IaC) capabilities can streamline infrastructure provisioning and enhance the efficiency of data engineering processes. The study employed a comprehensive review of current CI/CD practices, analyzing the impact of Terraform on deployment efficiency, operational complexity, and regulat

APA, Harvard, Vancouver, ISO, and other styles

33

Kamalakar, Reddy Ponaka. "A Scalable and Secure CI/CD Platform: High Availability and Disaster Recovery Approach." INTERNATIONAL JOURNAL OF INNOVATIVE RESEARCH AND CREATIVE TECHNOLOGY 6, no. 3 (2020): 1–5. https://doi.org/10.5281/zenodo.14045480.

Full text

Abstract:

This paper presents a scalable and secure continuous integration/continuous deployment (CI/CD) platform architecture for on-premise deployments. It highlights key features for implementing high availability (HA) and disaster recovery (DR) strategies, addressing scalability, security, and resilience. With the increasing reliance on CI/CD pipelines for rapid software delivery, ensuring that these platforms remain operational under adverse conditions, such as hardware failures or data center outages, is critical. This paper provides methodologies and best practices for achieving HA and DR in larg

APA, Harvard, Vancouver, ISO, and other styles

34

Rahul Chowdary Bondalapati, Lakshmi Apoorwa Kumpatla, and Suvarna Rekha Karumanchi. "Advancing cloud platform engineering: Innovations in secure deployment automation, CI/CD, and Risk Mitigation for 2025." World Journal of Advanced Engineering Technology and Sciences 15, no. 3 (2025): 0149–56. https://doi.org/10.30574/wjaets.2025.15.3.0911.

Full text

Abstract:

The rapid evolution of cloud platform engineering has revolutionized secure deployment automation, continuous integration, and continuous deployment (CI/CD) practices, while introducing innovative risk mitigation strategies. The integration of Artificial Intelligence into cloud operations has transformed threat detection capabilities and automated security response mechanisms across distributed environments. Advanced automation frameworks have enhanced infrastructure management through self-healing mechanisms and intelligent configuration controls. Cloud-native security architectures implement

APA, Harvard, Vancouver, ISO, and other styles

35

Hareesh, Kumar Rapolu. "DevSecOps For Improving Java Applications: Implementing CI/CD Pipelines on AWS." International Journal of Innovative Research in Engineering & Multidisciplinary Physical Sciences 11, no. 5 (2023): 1–5. https://doi.org/10.5281/zenodo.14950721.

Full text

Abstract:

The following research paper has underscored that the principles of DevSecOps stand to be an essential pillar for Java applications with CI/CD pipelines on AWS. It has used the services of AWS such as CodeCommit, CodePipeline, CodeBuild, CodeDeploy and CloudWatch. This has been used for automated builds, tests and deployments. Moreover, the research paper has also highlighted the integration of security throughout the CI/CD lifecycle. It has been attained by using tools like SonarQube and ZAP. This has not only enhanced the software security but at the same time it has lo accelerated with rele

APA, Harvard, Vancouver, ISO, and other styles

36

Praveen, Kumar Koppanati. "Building Custom CI/CD Pipelines for Java Applications in GitLab." Journal of Scientific and Engineering Research 6, no. 6 (2019): 233–38. https://doi.org/10.5281/zenodo.14005865.

Full text

Abstract:

For modern software development, especially for Java applications Continuous Integration and Continuous Deployment (CI/CD) pipelines is a vital aspect. This paper aims to provide an in-depth exploration of building custom CI/CD pipelines in GitLab specifically for Java applications. In this guide, we are going to touch upon proper ways on how you should integrate GitLab CI/CD with Java development tools and strategies for pipeline optimization towards effective testing, as well as deployment; analyze Docker methodology where environment consistency is a concern. This will emphasize the key are

APA, Harvard, Vancouver, ISO, and other styles

37

Bondalapati, Rahul Chowdary, and Satish Kumar Malaraju. "Enhancing Secure Deployment Automation in Cloud Environments: A Risk-Driven Approach to CI/CD Pipelines." European Journal of Computer Science and Information Technology 13, no. 38 (2025): 60–75. https://doi.org/10.37745/ejcsit.2013/vol13n386075.

Full text

Abstract:

This article presents a structured approach to integrating risk mitigation strategies into CI/CD pipelines for secure cloud deployments. The article introduces a comprehensive security framework that seamlessly embeds protection mechanisms throughout the deployment lifecycle while maintaining operational velocity. By leveraging automated security scanning, policy-as-code implementations, sophisticated IAM enforcement, and real-time anomaly detection, the article approach addresses the fundamental tension between deployment speed and security assurance. At the core of the article lies a dynamic

APA, Harvard, Vancouver, ISO, and other styles

38

Sri, Keerthi Suggu. "Shadows in the Supply Chain: Assessing Security Gaps in Third‑Party Dependencies." Journal of Scientific and Engineering Research 11, no. 11 (2024): 179–86. https://doi.org/10.5281/zenodo.15606825.

Full text

Abstract:

Modern software supply chains are dense, dynamic webs of third‑party packages, container layers, and infrastructure‑as‑code templates. While these dependencies super‑charge developer productivity, they also create “shadow” risk: latent vulnerabilities or malicious implants that may be several transitive hops away from any manifest file. In this paper we present the first cross‑ecosystem, end‑to‑end measurement of supply‑chain risk covering N = 1.1 million packages and 47,000 public CI/CD pipelines across JavaScript (npm), Python (PyPI) and Java (Maven Central). Our study reveals th

APA, Harvard, Vancouver, ISO, and other styles

39

Swamy, Prasadarao Velaga. "Scaling Machine Learning Model Training with CI/CD Pipelines in Cloud Environments." International Journal of Innovative Research in Engineering & Multidisciplinary Physical Sciences 8, no. 1 (2020): 1–10. https://doi.org/10.5281/zenodo.12805504.

Full text

Abstract:

As machine learning (ML) continues to advance, the need for scalable, efficient, and reliable model training has become critical. Traditional approaches to ML model training often struggle to meet these demands, prompting the integration of Continuous Integration and Continuous Deployment (CI/CD) practices with cloud environments. This survey paper explores the intersection of CI/CD pipelines and cloud-based solutions in scaling ML model training. We provide a comprehensive review of the current state of CI/CD practices tailored for ML workflows, examine the benefits and offerings of cloud env

APA, Harvard, Vancouver, ISO, and other styles

40

Manolov, Vladislav, Daniela Gotseva, and Nikolay Hinov. "Practical Comparison Between the CI/CD Platforms Azure DevOps and GitHub." Future Internet 17, no. 4 (2025): 153. https://doi.org/10.3390/fi17040153.

Full text

Abstract:

Continuous integration and delivery are essential for modern software development, enabling teams to automate testing, streamline deployments, and deliver high-quality software more efficiently. As DevOps adoption grows, selecting the right CI/CD platform is essential for optimizing workflows. Azure DevOps and GitHub, both under Microsoft, are leading solutions with distinct features and target audiences. This paper compares Azure DevOps and GitHub, evaluating their CI/CD capabilities, scalability, security, pricing, and usability. It explores their integration with cloud environments, automat

APA, Harvard, Vancouver, ISO, and other styles

41

Hemanth, Kumar. "Automating Compliance in Financial Technology through CI/CD Pipelines." International Journal of Innovative Research in Engineering & Multidisciplinary Physical Sciences 7, no. 4 (2019): 1–8. https://doi.org/10.5281/zenodo.14684792.

Full text

Abstract:

The Fintech sector is uniquely positioned at the intersection of innovation and regulation. As the industry embraces continuous development, ensuring compliance with stringent financial regulations like PCI DSS, GDPR, and ISO 27001 remains a critical challenge. This paper explores the integration of compliance mechanisms into Continuous Integration/Continuous Deployment (CI/CD) pipelines, offering a detailed analysis of tools, methodologies, and real-world applications. By embedding compliance checks into the development lifecycle, organizations can achieve operational efficiency, robust secur

APA, Harvard, Vancouver, ISO, and other styles

42

Taiwo Joseph Akinbolaji, Godwin Nzeako, David Akokodaripon, and Akorede Victor Aderoju. "Automation in Cloud-Based DevOps: A Guide to CI/CD Pipelines and Infrastructure as Code (IaC) with Terraform and Jenkins." World Journal of Advanced Engineering Technology and Sciences 13, no. 2 (2024): 090–104. http://dx.doi.org/10.30574/wjaets.2024.13.2.0542.

Full text

Abstract:

This study offers a comprehensive analysis of automation in cloud-based DevOps, focusing on the role of Continuous Integration/Continuous Delivery (CI/CD) pipelines and Infrastructure as Code (IaC) in streamlining software development processes. Employing tools like Jenkins and Terraform, the research aims to demonstrate how automation can significantly enhance operational efficiency, scalability, and security in cloud deployments. Through a detailed examination of CI/CD components and their integration with IaC, this paper identifies key findings, including the reduction of manual errors, imp

APA, Harvard, Vancouver, ISO, and other styles

43

Jithendra Prasad Reddy Baswareddy. "Enhancing observability and resiliency in hybrid cloud CI/CD platforms." Global Journal of Engineering and Technology Advances 23, no. 1 (2025): 232–42. https://doi.org/10.30574/gjeta.2025.23.1.0111.

Full text

Abstract:

Hybrid cloud environments provide optimal CI/CD infrastructure by balancing security, performance, and scalability, but present challenges in observability and resiliency across distributed systems. Organizations implementing mature observability practices across metrics, logs, and traces experience significantly faster incident detection and resolution times. Integration of tools like Prometheus, Grafana, and Splunk creates unified monitoring capabilities that bridge on-premises and cloud environments. Resilient CI/CD architectures employ scalability patterns including autoscaling and job dis

APA, Harvard, Vancouver, ISO, and other styles

44

Muñoz, Antonio, Aristeidis Farao, Jordy Ryan Casas Correia, and Christos Xenakis. "P2ISE: Preserving Project Integrity in CI/CD Based on Secure Elements." Information 12, no. 9 (2021): 357. http://dx.doi.org/10.3390/info12090357.

Full text

Abstract:

During the past decade, software development has evolved from a rigid, linear process to a highly automated and flexible one, thanks to the emergence of continuous integration and delivery environments. Nowadays, more and more development teams rely on such environments to build their complex projects, as the advantages they offer are numerous. On the security side however, most environments seem to focus on the authentication part, neglecting other critical aspects such as the integrity of the source code and the compiled binaries. To ensure the soundness of a software project, its source cod

APA, Harvard, Vancouver, ISO, and other styles

45

Shanmukhi, Bhaskara Sahithi. "Implementing and Using CI/CD: Addressing Key Challenges Faced by Software Developers." INTERANTIONAL JOURNAL OF SCIENTIFIC RESEARCH IN ENGINEERING AND MANAGEMENT 08, no. 008 (2024): 1–3. http://dx.doi.org/10.55041/ijsrem37128.

Full text

Abstract:

Software development teams that want to increase the calibre, dependability, and velocity of their software releases must implement continuous integration and delivery (CI/CD) techniques. Developers must now overcome several obstacles as a result of this shift, including the necessity to automate testing and deployment procedures, uphold strict version control, and promote cooperation between the development, testing, and operations teams. This article looks at the main obstacles that developers face when implementing and using CI/CD, and it does so by analysing case studies and current indust

APA, Harvard, Vancouver, ISO, and other styles

46

Naga Murali Krishna Koneru. "Modernizing CI/CD Pipelines: Migrating from Legacy Tools to GitLab for Enterprise Applications." International Journal of Science and Research Archive 1, no. 2 (2021): 136–56. https://doi.org/10.30574/ijsra.2021.1.2.0027.

Full text

Abstract:

In today’s modern software development, CI and CD pipelines are essential tools for faster and more reliable delivery of high-quality software. Such legacy CI/CD tools perpetuate themselves, and many enterprises continue to cling to inefficient, janky, and constantly fragmented tools that default to introduce complexities in scaling and integrating with modern technologies. This paper advocates developing a modern CI/CD system with GitLab, a DevOps platform combining version control, CI/CD, monitoring, and security into a single unified platform. This paper studies the difficulties with the cu

APA, Harvard, Vancouver, ISO, and other styles

47

Ishwar, Bansal. "Automating Scalable and Secure Enterprise Applications with Full-Stack Java: CI/CD Integration with Canary Testing." Applied Science and Engineering Journal for Advanced Research 4, no. 3 (2025): 26–31. https://doi.org/10.5281/zenodo.15590008.

Full text

Abstract:

Focusing on the integration of Continuous Integration and Continuous Deployment (CI/CD) pipelines with canary testing techniques, this paper investigated the automation of scalable and secure enterprise systems created with full-stack Java. The study looked at changes in deployment frequency, system performance, dependability, and security posture by means of a thorough DevOps architecture. Apart from a notable drop in security vulnerabilities, the results showed notable improvements in deployment efficiency, less downtime, and quicker recovery times. By allowing incremental rollouts and early

APA, Harvard, Vancouver, ISO, and other styles

48

Researcher. "ENHANCING DEVELOPER PRODUCTIVITY THROUGH AUTOMATED CI/CD PIPELINES: A COMPREHENSIVE ANALYSIS." International Journal of Computer Engineering and Technology (IJCET) 15, no. 5 (2024): 882–91. https://doi.org/10.5281/zenodo.13929524.

Full text

Abstract:

This comprehensive article explores the transformative impact of Continuous Integration and Continuous Deployment (CI/CD) pipelines on modern software development practices. It delves into the core components of CI/CD pipelines, including automated testing, code analysis, and deployment strategies, examining how these elements contribute to enhanced developer productivity and software quality. Through an analysis of case studies from the tech, finance, and e-commerce sectors, the article demonstrates the tangible benefits of CI/CD implementation, such as significant reductions in lead times, i

APA, Harvard, Vancouver, ISO, and other styles

49

Srinivas, Adilapuram. "GitHub Actions vs. Jenkins: Choosing the Optimal CI/CD Pipeline for your GCP Ecosystem." European Journal of Advances in Engineering and Technology 10, no. 3 (2023): 105–9. https://doi.org/10.5281/zenodo.14575690.

Full text

Abstract:

GitHub Actions and Jenkins are both Continuous Integration/Continuous Delivery (CI/CD) tools that can create CI/CD pipelines in various environments and ecosystems, including the Google Cloud Platform (GCP). Jenkins is an open-source, older, and more comprehensive tool requiring significant skills and effort. GitHub Actions is simpler and closely tied to the GitHub platform. This article compares the two tools in ten dimensions: workflow definition and configuration, scalability and performance, authentication, security and monitoring, cost management, community, ecosystem and plugin support,

APA, Harvard, Vancouver, ISO, and other styles

50

Zulunov, Ravshanbek Mamatovich. "Security tools in a continuous integration/continuous deployment pipeline." Research and implementation 2, no. 12 (2024): 237–44. https://doi.org/10.5281/zenodo.14557311.

Full text

Abstract:

Integrating a vulnerability database into a Continuous Integration / Continuous Deployment (CI/CD) pipeline is essential for enhancing the security posture of software development processes. This integration allows for automated identification and remediation of known vulnerabilities in applications and their dependencies. The process involves selecting a suitable vulnerability database, configuring API access, and embedding API calls within the CI/CD workflow to check for vulnerabilities at various stages of development. Additionally, it encompasses the analysis of vulnerability data, automat

APA, Harvard, Vancouver, ISO, and other styles

We offer discounts on all premium plans for authors whose works are included in thematic literature selections. Contact us to get a unique promo code!