What is the Code phase in the DevSecOps process?
This phase deals with the writing and management of the source code. The developers write the source code in the selected programming language (using development frameworks) in their favorite IDE (Integrated Development Environment) or text editors. In the case of a small/independent project, the project is processed into a deployable/usable form in IDE itself. However, when multiple developers are working on a big project, the code from all contributors needs to be collected in one place (Code Repository) before the build phase.
The following components are there in this phase:
IDE or Text Editor
Version Control System
People involved: Developers
What is a Version Control System?
A version control system (VCS) is used for tracking, sharing, managing the software source code. A VCS provided the users a way to host a code repository, pull the existing code, make changes to it, push the code back to the repository.
Examples: Git, Mercurial
What is version control? https://www.atlassian.com/git/tutorials/what-is-version-control
A step to step guide to Git: https://opensource.com/article/18/1/step-step-guide-git
What is mercurial? https://www.mercurial-scm.org/
Why is it important in DevSecOps?
The source code is the heart and soul of the project as it literally defined what the project will perform and how will it work. In a complex project, multiple people work simultaneously on different releases, bug fixes, features, etc. Hence, it is an important task to make sure that no security issues are introduced in this phase.
What will you learn in this section?
The user will learn to perform the following tasks with CLI and GUI tools
Creating a Code Repository
Cloning existing Code repository
Making Code commits and pushing code
Maintaining different branches
Undoing Commits and rollbacks
Git CLI client
Git Cola (GUI client)
Git: Learn Basics with Git CLI
Kali CLI and GitLab instance are provided. The user has to follow the manual and perform different activities related to Git VCS using the Git CLI tool.
Objective: Follow the manual and learn how to use Git with Git CLI!
Git: Learn Basics with Git Cola
Kali CLI and GitLab instance are provided. The user has to follow the manual and perform different activities related to Git VCS using the Git Cola tool.
Objective: Follow the manual and learn how to use Git with Git Cola!