QuestionQ22
Security EngineeringA company maintains infrastructure code for its cloud-based services in a remote repository. Each time the code is saved to the repository, it is automatically deployed to the development environment. Developers are concerned because deployments frequently fail due to minor code problems and occasional failed security-control checks in the development environment. Which recommendations should a security engineer make to reduce deployment failures?
Choose two
- A Software composition analysis
- B Pre-commit code linting
- C Repository branch protection
- D Automated regression testing
- E Code submit authorization workflow
- F Pipeline compliance scanning
Community Discussion