Chapter 2. Development workflow
RHTAP integrates security at every step of the DevSecOps workflow:
- Start with secure templates: Leverage pre-built templates from Red Hat Developer Hub (RHDH) for a secure foundation. These templates include code repositories, documentation, and pre-configured CI/CD pipelines.
- Develop and modify code: Modify your code after creating the application. Each code change triggers a pipeline that automatically performs security checks, including artifact signing, vulnerability scanning, and SBOM generation.
- OpenShift GitOps driven deployment: RHTAP enforces security policies throughout the development lifecycle, from development to production, using Enterprise Contracts (EC). This ensures that only compliant builds are deployed.
Additional Resources
Revised on 2025-02-06 17:38:03 UTC