ShiftLeft released a new version of NextGen Static Analysis (NG SAST), including new workflows, purpose-built for developers that significantly improve security, while enhancing productivity.
As we start off 2018, it is obvious that the culture of DevOps in the enterprise is here to stay, but what of DevSecOps? From continued adoption of API-first solutions to core code development, below I discuss a few predictions I see on how DevOps and SecOps will further entwine in addition to how related technologies will evolve and impact business in 2018.
The term "DevOps" continues to be used in too many situations and descriptors. For me, it's a cultural pattern grounded by "Collaboration, Automation, Measurement, and Sharing" (CAMS). In 2018, I think we will begin to see DevSecOps become the new DevOps. Security truly needs to be seamlessly embedded into the systems development life cycle (SDLC) and CI/CD pipeline, instead of an afterthought and a barrier to deployment.
2018 will see continued adoption of API-first solutions, microservices architectural patterns and more developers leveraging "Serverless" function as a service (FaaS) to deliver features at a higher velocity. Strategies around Machine Learning models to deliver AI solutions will be baked in from the start of a project.
Core code development won't be going away anytime soon, but more and more automated solutions that ensure that packages and libraries are always at the latest version will be adopted. The goal of automation will be focused on allowing developers to only worry about the core features that they are working on, not maintaining the "scaffolding."
It's surprising how many organizations still haven't (fully) adopted Agile methodology, and many are still simply "Wagile" (Waterfall-Agile). In 2018, Continuous Delivery will become table stakes for those who want to stave off disruption.
The combined approaches of Continuous Integration, Continuous Delivery, Continuous Testing, and Continuous Deployment will continue to be implemented by Enterprises looking to deliver features to market at a higher velocity. This will also require cultural evolution where collaboration and feedback loops are tighter.
API (Application Program Interface)
Restful APIs should be a core part of solutions, especially as everything, including infrastructure, moves to a software-defined, programmatic world. APIs also allow for rapid integrations with potential partners and business expansion.