Security is your responsibility

Security is the primary non-functional requirement. You always have to be aware of security. As a developer it's your responsibility.

Make sure you include security tests in your build and deployment pipeline to:

• Ensure that all third-party modules you use are secure
• Ensure you do not check secrets into your code repository
• Ensure that active checks are made against possible security glitches in your code

When checking for problems in your dependencies, if you have to make an exception ensure you note the date and why you are making the exception. Then add a task to review this in the near future.

Make sure knowledge around security continues to grow in your team.

Learn how to use validated domain objects to make your code naturally secure.