Every release is scanned before it ships
Security checks built into every release
- Problem
- Security reviews came last and delayed releases.
- What we did
- Added automated scans and a container pipeline.
- What changed
- Releases carry their own evidence for auditors.
- Kubernetes
- GitHub Actions
- Trivy
- SonarQube