DevOps Articles

Curated articles, resources, tips and trends from the DevOps World.

DevSecOps Challenge #6: The all-important triaging of security issues

3 years ago www.uleska.com

Summary: This is a summary of an article originally published by the source. Read the full original article here →

Security tools can be noisy. In 20 years, we haven’t seen a single security tool return a set of issues that are 100% what needs to be worked on. Ultimately, there are a few main aspects to triaging lists of security issues to achieve better results from your tools.

There are a few reasons why issues returned from a security tool may not need to be handled.

Security tools are designed to run security engines, determine issues and provide a list of them back to you.