project

NCCoE Secure Software Development, Security, and Operations (DevSecOps) Project

NCCoE project that builds example DevSecOps implementations, referred to as software factories, to show how SSDF practices and tasks can be carried out in an automated pipeline.

Known aliases

NCCoE DevSecOps project

Relationships

No evidence-backed relationships are recorded.

Current clusters

build1 publisher

NCCoE's notional DevSecOps model gates every promotion between its seven phases

The NCCoE has decomposed SSDF practices into a seven-phase lifecycle in which each phase is a separate environment and no change advances without clearing a control gate. The mapping back to the SSDF itself is future work.

Publishers:pages.nist.gov

Reality

Evidence68
Adoption: Insufficient
Hype gap0
Incentives45
Confidence62