Securing the development and delivery of modern applications

Matej Bašić (), Zlatan Morić (), Jasmin Redžepagić () and Josip Torbar ()

Edelweiss Applied Science and Technology, 2025, vol. 9, issue 1, 393-402

Abstract: This study analyzes the significant difficulties and solutions for ensuring the security of developing and deploying contemporary software applications in the current fast-paced technological landscape. It examines the escalating hazards linked to expedited software delivery cycles via agile and DevOps methodologies, emphasizing critical domains such as static code analysis, CI/CD pipeline security, container image scanning, and container platform security. This research consolidates findings from existing studies and practical case scenarios, assessing the efficacy of SonarQube, Clair, Trivy, and Kube-bench in detecting vulnerabilities, improving operational efficiency, and guaranteeing adherence to industry standards. Case studies, such as Skyscanner's implementation of SonarQube and DAZN's utilization of Checkmarx, underscore the concrete advantages of incorporating sophisticated security protocols. The results underscore the significance of multi-tiered security approaches and highlight prospects for utilizing artificial intelligence to improve vulnerability identification and real-time surveillance. This paper offers practical recommendations to assist organizations in tackling current security issues and anticipating future threats.

Keywords: Application security; Container image scanning; Container platform security; Continuous Integration/Continuous Delivery; DevSecOps; vulnerability detection; Software Development Lifecycle; Static Code Analysis (search for similar items in EconPapers)
Date: 2025
References: Add references at CitEc
Citations:

Downloads: (external link)
https://learning-gate.com/index.php/2576-8484/article/view/4153/1616 (application/pdf)

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:ajp:edwast:v:9:y:2025:i:1:p:393-402:id:4153

Access Statistics for this article

More articles in Edelweiss Applied Science and Technology from Learning Gate
Bibliographic data for series maintained by Melissa Fernandes ().