Which framework provides guidelines for securing DevOps pipelines and CI/CD processes?
- DevSecOps Framework
- NIST SP 800-204
- Both A and B
- Neither
Answer: Both A and B
DevSecOps integrates security into CI/CD: SAST, DAST, dependency scanning. NIST SP 800-204 covers microservices security including pipelines. Critical for secure software delivery.