Zivra's Integrated DevOps Toolchain (IDT) utilizes CircleCI to facilitate the rapid and efficient construction of CI/CD pipelines. Using the IDT clients are able to reduce build and cycle times, leading to notable decreases in engineering and management costs. Additionally, IDT enhances application reliability and quality through comprehensive logging, empowering developers to effectively troubleshoot and analyze performance issues. Users benefit from a range of customization options, ensuring that the toolchain meets diverse project requirements.

IDT Examples

Basic Continuous Integration (CI)

Build application code and perform unit tests and other code quality and security scans, such as Software Composition Analysis (SCA),on all commits to your code base. Deliver build artifacts to a repository or otherwise archive.

Ideal for code which does not require deployment, or where deployment is handled through another process. This includes projects such as libraries and legacy applications.

CI + Continuous Deployment (CD) + Basic security

Add deployment logic to safely and securely deploy an application after the CI process has completed. Implement DecSecOps practices and augment quality in the CIstages to include StaticApplication Security Testing (SAST). This enables your development team to "shift left" the testing stages and conform to the OWASPWeb SecurityTesting Guide. This option is ideal for modern applications hosted on the cloud that must remain available and secure at all times.

CI + CD + Observability + End-to-end security

In addition to standard CI/CD, this solution will add steps to implement cryptographic signing ofall source code commits and build artifacts. This option will set up and enforce key management processes, standardize and configure logging during deployment to ensure proper log collection. In addition, developers can leverage CircleCI's audit capabilities to ensure all changes are authorized.

Customizations

While the examples above cover a good range of DevOps scenarios, the IDT is not limited to the options above. The flexibility of the toolchain allows you to incorporate various stages specific to your application, such as database deployment, advanced deployment methods, SBOM management, and more. You can also tailor the solution to improve collaboration and facilitate the way your development team communicates and interacts.

Security

Security is the primary driver for the IDT and a key design principle. Not only are the automations delivered by the IDT secure by design, but you also produce more secure software through DevSecOps principles integrated into the toolchain. The IDT platform supports enterprise grade security and Role Based Access Control. With its comprehensive audit logging, users can ensure all changes are authorized by the correct person. Software produced using DevSecOps and CI techniques is inherently more secure and delivered with higher quality. When the toolchain is implemented correctly, and the development team is on board, software quality can increase exponentially. In addition to delivering higher quality software, our solution can reduce security breaches, such as static credentials being leaked and other security concerns caused by manual processes or human error