A municipal DevOps pipeline deploys code to production Friday nights. Leadership wants security checks before release. Where should those checks run?
Select an answer to reveal the explanation.
Short Explanation
Bolt security tests into CI so bad builds fail in the garage—not after Friday night deploy when citizens are already using the app.
Full Explanation
Integrating security tests into continuous integration catches defects before production deploy and makes checks non-optional. Post-production discovery, skippable manual steps, and unintegrated laptop scans weaken release assurance.