Haku

Implementations of DevSecOps Tools in WIMMA Lab, Case : WIMMA Lab 2019

QR-koodi

Implementations of DevSecOps Tools in WIMMA Lab, Case : WIMMA Lab 2019

WIMMA Lab 2019 was a highly autonomous software development project environment and simulated as closely as possible how work is done at the software development companies. Students who applied were interviewed and were chosen to have four multidisciplinary and motivated virtual companies. The virtual companies had varying internal and external tasks to create content, develop software, research, and create proof on concepts.

Each virtual company had multiple continuous integration, delivery, and deployment pipelines with various tools. A pipeline represents a process from committing code to a source code repository to deploying the built and tested the application to a production environment. The software development lifecycle was divided into ten phases, and the pipelines were contrasted to these phases. The goal was to identify how each phase was implemented, or not, in the virtual companies' pipelines.

The virtual companies' GitLab projects were analyzed to gather a picture of the implementations. GitLab projects consisted of GitLab CI, GitLab Container Registry, GitLab Pages, GitLab Runners, and various settings. The projects also utilized multiple third-party platforms and tools such as Docker, Google Cloud Platform, and Robot Framework.

Each of the software development lifecycle phases was covered by the projects, though no single pipeline incorporated a tool(s) for every phase. Some phases were implemented very lightly, such as security, monitor, and protect phases.

WIMMA Lab 2019 can be considered a very advanced software development environment regarding automation, modern tooling usage, and providing in-demand skills to work life.

Tallennettuna: