DevSecOps Principles ('Shift Left')

Summary

Integrating security checks earlier in the development lifecycle (during coding and CI, not just before production release) — 'shifting left' catches vulnerabilities when they're cheap to fix, not after they're deployed.

• 1Diagram a traditional 'security review at the end' process versus a shift-left approach.
• 2Learn why fixing a vulnerability in code review is far cheaper than fixing it in production.
• 3Identify one security check from this phase that could be added directly into a CI pipeline (Phase 6).