Adopsi Devsecops Untuk Mendukung Metode Agile Menggunakan Trivy Sebagai Security Scanner Docker Image Dan Dockerfile

Abstract

Compliance with personal data protection laws requires electronic system operators to pay more attention to security in applications. Security testing which is usually done at the end of the SDLC makes Agile principles incompatible with advantages that prioritize acceleration, adaptability and responsiveness to change. DevSecOps implementation using Trivy will insert a security scanner process for applications that are deployed in containerized form. The continuous process of security scanning integrated in CI/CD will increase the awareness of developers in terms of application security, so that developers will more quickly fix these problems and avoid security problems at the end of the SDLC.

Enhancing Vulnerability Management with Artificial Intelligence Algorithms

“…One of the greatest advantages identified for the open-source tool mentioned before is that by utilizing Trivy as a security scanner, developers become more aware of security issues as they arise. This proactive approach enables them to address vulnerabilities promptly, reducing the likelihood of security problems being discovered late in the development process [8]. This feature positions Trivy as an invaluable tool for bridging the gap between development and security in modern DevOps practices.…”

Enhancing Vulnerability Management with Artificial Intelligence Algorithms

“…One of the greatest advantages identified for the open-source tool mentioned before is that by utilizing Trivy as a security scanner, developers become more aware of security issues as they arise. This proactive approach enables them to address vulnerabilities promptly, reducing the likelihood of security problems being discovered late in the development process [8]. This feature positions Trivy as an invaluable tool for bridging the gap between development and security in modern DevOps practices.…”

Enhancing Vulnerability Management with Artificial Intelligence Algorithms

“…One of the greatest advantages identified for the open-source tool mentioned before is that by utilizing Trivy as a security scanner, developers become more aware of security issues as they arise. This proactive approach enables them to address vulnerabilities promptly, reducing the likelihood of security problems being discovered late in the development process [8]. This feature positions Trivy as an invaluable tool for bridging the gap between development and security in modern DevOps practices.…”

Enhancing Vulnerability Management with Artificial Intelligence Algorithms

“…One of the greatest advantages identified for the open-source tool mentioned before is that by utilizing Trivy as a security scanner, developers become more aware of security issues as they arise. This proactive approach enables them to address vulnerabilities promptly, reducing the likelihood of security problems being discovered late in the development process [8]. This feature positions Trivy as an invaluable tool for bridging the gap between development and security in modern DevOps practices.…”