menu
{ "item_title" : "Security in the Pipeline", "item_author" : [" Rafael Sanders "], "item_description" : "Modern software moves fast.But speed without security creates risk-vulnerabilities slip into production, secrets leak into repositories, and insecure dependencies quietly accumulate across pipelines. Security cannot be an afterthought anymore; it must be part of the delivery process itself.Security in the Pipeline is a practical, engineering-focused guide to integrating security directly into CI/CD workflows using DevSecOps principles.Why DevSecOps mattersTraditional security approaches often fail because they arrive too late in the lifecycle.Modern teams face challenges such as: insecure code reaching productionexposed API keys and secretsvulnerable dependencies in buildslack of automated security testingslow manual security reviewsfragmented security tooling across pipelinesDevSecOps solves this by embedding security into every stage of development.What you will learnfundamentals of DevSecOps architectureshift-left security principles and workflowsstatic application security testing (SAST)dynamic application security testing (DAST)software composition analysis (SCA)secrets detection and management strategiessecure CI/CD pipeline designdependency and supply chain securitycontainer and infrastructure scanningautomated security gates and policiesFrom reactive security to embedded protectionThroughout the book, you will learn how to: integrate security tools into CI/CD pipelinesdetect vulnerabilities before deploymentprevent secret leakage in codebasesenforce security policies automaticallyreduce friction between developers and security teamsbuild continuous security feedback loopsEach chapter focuses on practical engineering workflows used in modern DevOps environments.Practical applicationsenterprise CI/CD pipelinescloud-native application deliverymicroservices security automationcontainerized deployment workflowsAPI and backend systems securitystartup and scale-up engineering teamsThese examples reflect real production environments where speed and security must coexist.Who this book is forDevOps engineerssecurity engineerssoftware developersplatform engineerscloud engineersengineering teams building CI/CD systemsIf you want to build pipelines that deliver software quickly without sacrificing security, this book provides the roadmap.Build fast.Secure early.Protect every deployment.", "item_img_path" : "https://covers1.booksamillion.com/covers/bam/9/79/819/917/9798199171472_b.jpg", "price_data" : { "retail_price" : "24.99", "online_price" : "24.99", "our_price" : "24.99", "club_price" : "24.99", "savings_pct" : "0", "savings_amt" : "0.00", "club_savings_pct" : "0", "club_savings_amt" : "0.00", "discount_pct" : "10", "store_price" : "" } }
Security in the Pipeline|Rafael Sanders

Security in the Pipeline : DevSecOps: Shift-Left Security, SAST, DAST, and Secrets Management for Engineering Teams

local_shippingShip to Me
In Stock.
FREE Shipping for Club Members help

Overview

Modern software moves fast.

But speed without security creates risk-vulnerabilities slip into production, secrets leak into repositories, and insecure dependencies quietly accumulate across pipelines. Security cannot be an afterthought anymore; it must be part of the delivery process itself.

"Security in the Pipeline" is a practical, engineering-focused guide to integrating security directly into CI/CD workflows using DevSecOps principles.


Why DevSecOps matters

Traditional security approaches often fail because they arrive too late in the lifecycle.

Modern teams face challenges such as:

  • insecure code reaching production
  • exposed API keys and secrets
  • vulnerable dependencies in builds
  • lack of automated security testing
  • slow manual security reviews
  • fragmented security tooling across pipelines

DevSecOps solves this by embedding security into every stage of development.


What you will learn
  • fundamentals of DevSecOps architecture
  • shift-left security principles and workflows
  • static application security testing (SAST)
  • dynamic application security testing (DAST)
  • software composition analysis (SCA)
  • secrets detection and management strategies
  • secure CI/CD pipeline design
  • dependency and supply chain security
  • container and infrastructure scanning
  • automated security gates and policies

From reactive security to embedded protection

Throughout the book, you will learn how to:

  • integrate security tools into CI/CD pipelines
  • detect vulnerabilities before deployment
  • prevent secret leakage in codebases
  • enforce security policies automatically
  • reduce friction between developers and security teams
  • build continuous security feedback loops

Each chapter focuses on practical engineering workflows used in modern DevOps environments.


Practical applications
  • enterprise CI/CD pipelines
  • cloud-native application delivery
  • microservices security automation
  • containerized deployment workflows
  • API and backend systems security
  • startup and scale-up engineering teams

These examples reflect real production environments where speed and security must coexist.


Who this book is for
  • DevOps engineers
  • security engineers
  • software developers
  • platform engineers
  • cloud engineers
  • engineering teams building CI/CD systems

If you want to build pipelines that deliver software quickly without sacrificing security, this book provides the roadmap.

Build fast.
Secure early.
Protect every deployment.

This item is Non-Returnable

Details

  • ISBN-13: 9798199171472
  • ISBN-10: 9798199171472
  • Publisher: Independently Published
  • Publish Date: June 2026
  • Dimensions: 9 x 6 x 0.68 inches
  • Shipping Weight: 0.73 pounds
  • Page Count: 272

Related Categories

You May Also Like...

    1

BAM Customer Reviews