Cover Image

Advancing DevSecOps in SMEs: Challenges and Best Practices for Secure CI/CD Pipelines

Fuente: arXiv

Saved in:

Bibliographic Details
Main Authors:	Cheenepalli, Jayaprakashreddy, Hastings, John D., Ahmed, Khandaker Mamun, Fenner, Chad
Format:	Preprint
Published:	2025
Subjects:	Cryptography and Security Computers and Society Software Engineering D.2.2; K.6.5; D.2.9
Online Access:	Acceder al recurso
Tags:	Add Tag No Tags, Be the first to tag this record!

Similar Items

The Integration of Agile Methodologies in DevOps Practices within the Information Technology Industry
by: Hourigan, Ashley, et al.
Published: (2025)

DOLLmC: DevOps for Large Language model Customization
by: Fitsilis, Panos, et al.
Published: (2024)

From Assistance to Agency: Rethinking Autonomy and Control in CI/CD Pipelines
by: Barnes, Marcus Emmanuel, et al.
Published: (2026)

AgentOps: Enabling Observability of LLM Agents
by: Dong, Liming, et al.
Published: (2024)

Understanding the Effect of Agile Practice Quality on Software Product Quality
by: Licorish, Sherlock Anthony
Published: (2024)

Reinforcement Learning for Dynamic Workflow Optimization in CI/CD Pipelines
by: Soni, Aniket Abhishek, et al.
Published: (2026)

Making AI Compliance Evidence Machine-Readable
by: Ugarte, Rodrigo Cilla, et al.
Published: (2026)

Variability Modeling of Products, Processes, and Resources in Cyber-Physical Production Systems Engineering
by: Meixner, Kristof, et al.
Published: (2024)

GitHub Copilot and Developer Productivity: An Observational Dose-Response Analysis
by: Heilman, Alex, et al.
Published: (2026)

Factors that Contribute to the Success of a Software Organisation's DevOps Environment: A Systematic Review
by: Gwangwadza, Ashley, et al.
Published: (2022)

Position: How Regulation Will Change Software Security Research
by: Arzt, Steven, et al.
Published: (2024)

Characterising Contributions that Coincide with Vulnerability Mitigation in NPM Libraries
by: Rojpaisarnkit, Ruksit, et al.
Published: (2024)

Stabilization Without Simplification: A Two-Dimensional Model of Software Evolution
by: Furukawa, Masaru
Published: (2026)

The Upper Bound of Information Diffusion in Code Review
by: Dorner, Michael, et al.
Published: (2023)

Employee Performance when Implementing Agile Practices in an IT Workforce
by: Mookadam, Muhammad Hamid Raza, et al.
Published: (2025)

Employing Continuous Integration inspired workflows for benchmarking of scientific software -- a use case on numerical cut cell quadrature
by: Toprak, Teoman, et al.
Published: (2025)

Software Testing at the Network Layer: Automated HTTP API Quality Assessment and Security Analysis of Production Web Applications
by: Mughal, Ali Hassaan, et al.
Published: (2026)

Reconsidering Requirements Engineering: Human-AI Collaboration in AI-Native Software Development
by: Abbasi, Mateen Ahmed, et al.
Published: (2025)

Analyzing DevOps Practices Through Merge Request Data: A Case Study in Networking Software Company
by: Kansab, Samah, et al.
Published: (2025)

Decision Evidence Maturity Model for Agentic AI: A Property-Level Method Specification
by: Solozobov, Oleg
Published: (2026)

Site Reliability Engineering (SRE) and Observations on SRE Process to Make Tasks Easier
by: Puli, Balaram
Published: (2025)

PyPackIT: Automated Research Software Engineering for Scientific Python Applications on GitHub
by: Ariamajd, Armin, et al.
Published: (2025)

Iterative Audit Convergence in LLM-Managed Multi-Agent Systems: A Case Study in Prompt Engineering Quality Assurance
by: Calboreanu, Elias
Published: (2026)

ABACUS: A FinOps Service for Cloud Cost Optimization
by: Deochake, Saurabh
Published: (2024)

Governed Capability Evolution: Lifecycle-Time Compatibility Checking and Rollback for AI-Component-Based Systems, with Embodied Agents as Case Study
by: Qin, Xue, et al.
Published: (2026)

Evaluating the Overhead of the Performance Profiler Cloudprofiler With MooBench
by: Yang, Shinhyung, et al.
Published: (2024)

Beyond Greenfield: The D3 Framework for AI-Driven Productivity in Brownfield Engineering
by: Sharma, Krishna Kumaar
Published: (2025)

Context-Instrumental Data Distillation for Kubernetes Manifest Generation: Method and Experimental Evaluation
by: Kozachok, Andrey, et al.
Published: (2026)

ECM Contracts: Contract-Aware, Versioned, and Governable Capability Interfaces for Embodied Agents
by: Qin, Xue, et al.
Published: (2026)

Applying SHAPR in AI-Assisted Research Software Development: Lessons Learnt from Building a Share Trading System
by: Chan, Ka Ching
Published: (2026)

Teaching Scrum with a focus on compliance assessment
by: Torchiano, Marco, et al.
Published: (2024)

Measuring Agile Agreement: Development and Validation of the Manifesto and Principle Scales
by: Matton, Nicolas, et al.
Published: (2025)

Internal Vulnerabilities, External Threats: A Grounded Framework for Enterprise Open Source Risk Governance
by: Yang, Wenhao, et al.
Published: (2025)

Hybrid Work meets Agile Software Development: A Systematic Mapping Study
by: Khanna, Dron, et al.
Published: (2024)

Towards a Theory on Process Automation Effects
by: Vu, Hoang, et al.
Published: (2025)

Ecosystem-wide influences on pull request decisions: insights from NPM
by: Meijer, Willem, et al.
Published: (2024)

The Evolution of Agile and Hybrid Project Management Methodologies: A Systematic Literature Review
by: Leech, Bianca, et al.
Published: (2025)

ChatGPT: Friend or Foe When Comprehending and Changing Unfamiliar Code
by: Anderson, Norman, et al.
Published: (2026)

Visual Milestone Planning in a Hybrid Development Context
by: Miranda, Eduardo
Published: (2026)

Towards Socio-Technical Topology-Aware Adaptive Threat Detection in Software Supply Chains
by: Welsh, Thomas, et al.
Published: (2025)