Like development and operations, DevSecOps integrates security testing and automation into every part of the DevOps pipeline.

●

Why GitHub?

Features

● Mobile →

● Actions →

● Codespaces →

● Packages →

● Security →

● Code review →

● Project management →

● Integrations →

GitHub Sponsors →

Customer stories →

● Team

● Enterprise

●

Explore

Explore GitHub →

Learn and contribute

● Topics →

● Collections →

● Trending →

● Learning Lab →

● Open source guides →

Connect with others

● The ReadME Project →

● Events →

● Community forum →

● GitHub Education →

● GitHub Stars program →

● Marketplace

●

Pricing

Plans

● Compare plans →

● Contact Sales →

Education →

Start a free trial

Contact sales

Sign in Sign up

What is DevOps?

Jump to

Overview DevOps benefits DevOps and CI/CD DevSecOps Examples

A combination of the words “development” and “operations,” DevOps is a philosophy and set of practices that brings teams together to deliver better software, faster.

What do we mean when we say DevOps? A culture shift? A set of best practices? Specific tooling? In reality, it’s a combination of all three. DevOps is a way of working where development, IT operations, and security teams partner together to build, test, and provide regular feedback throughout the entire software development lifecycle (SDLC). From culture change to automation with CI/CD, let’s explore how DevOps teams develop shared context, expertise, tooling, and roles to ship better products.

The journey from silos to shared workflows

DevOps sets a new standard for how we build software. Before the mid-2000s, developers, IT operations, and security teams typically worked in silos. Developers wrote code, QA teams tested it, and IT operations teams deployed it to production. Security teams checked code for vulnerabilities only after deployment. If someone reported an issue, the entire process started over again. This linear approach to software was slow and frustrating for everyone involved. Then in 2008, system administrator Patrick Debois and software developer Andrew Shafer created a working group to help bridge the gap between operations and development teams. Their best practices became the DevOps processes we know today.
Learn more about the history of DevOps

Why adopt DevOps?

Traditional deployments are difficult, manual, and often break down, leading to employee burnout and unsustainable release cycles. In comparison, recent research shows that using DevOps methodologies and principles like automation drives productivity and improves developer experience. DevOps makes building and shipping software faster, friendlier, and more collaborative—and automates almost all of the process. Developers on DevOps teams focus on their goals, prioritize work-life balance, and get more time for the projects they care about. This type of satisfaction builds on what we know from organizational psychology: Teams do their best work when they’re personally invested in the outcome.

Improved productivity

Reduce manual tasks and gain consistency, reliability, and efficiency.

Cloud-ready code

Easily provision environments in the cloud to help teams work faster at scale and meet demand.

Security

Protect customers and code while managing access across locations and environments.

Collaboration

Build and foster a collaborative culture with b communication.

We’ve gone from over 30 siloed software engineering groups to a largely cohesive team. By using standards and automation, the DevOps journey is now three steps and takes less than a day.

Denis Canty // Vice President of Developer Services and Technology Labs

Breaking down the DevOps lifecycle

DevOps encompasses every part of application development. Whether you call them “steps,” “stages,” or “phases,” it all adds up to the DevOps lifecycle, the process DevOps teams use to build and ship software. Like any good DevOps approach, teams stay in constant collaboration and share many of the same tools and responsibilities from beginning to end.

Idea

Teams gather requirements and feedback, and start sketching out the resources they’ll need. DevOps teams focus on continuous planning—plans that can be updated frequently, even daily. To build out roadmaps and track progress towards their goals, teams leverage project management tools everyone can access and use.

Ideation stack

GitHub issues and project boards, Jira
Learn more about planning and tracking

Build

As project managers assign tasks, developers get to work. Here, DevOps comes to life: With version control and cloud-based development environments, developers can make ongoing changes and review code together in real time. DevOps continuous integration (CI) also kicks in, where automated tools turn code code changes into builds, run tests against required checks, then merge and prepare code for deployment.

Continuous integration stack

Git, GitHub Codespaces and Actions, GitLab CI pipelines, CircleCI, Jenkins
Learn more about continuous integration

Ship

After passing initial checks, developers use continuous delivery (CD) tools to automatically push code changes to a non-production testing or staging environment. Operations teams can immediately deploy the changes to production, without any surprises.

Continuous deployment stack

CD pipelines with GitHub Actions, GitHub Packages, Microsoft Azure
Learn more about deployment

Learn

Software may be out in the world, but the work isn’t over. Operations teams keep an eye on releases with monitoring tools that measure performance and monitor the impact of code changes. They ensure stability and uptime, gather customer feedback and stay in close contact with developers to push required fixes and address incidents faster.

Observability stack

Netdata, Lightstep, New Relic, App Dynamics, Sentry, Raygun, Honeycomb, Splunk

Automation at every step

Noticing a theme? As much as DevOps is about tools and collaboration, it’s also about automation. DevOps automation allows teams to ship to production faster by removing manual tasks and replacing them with automated processes like continuous integration and continuous delivery (CI/CD).
Learn more about automation

What is CI/CD?

Continuous integration and continuous delivery (CI/CD) combines every step of the software release process into one integrated workflow. Developers continuously build, test, and deploy code to production using a series of automated tools that power the team’s overall DevOps pipeline.
Learn more about CI/CD

The mindset we carry is that we always want to automate ourselves into a better job. We want to make sure that the task we’re doing manually today becomes mostly automated.

Jon Parise // Engineering Architect

Building a DevOps culture

Successful DevOps depends on cultural change—adopting a collaboration-first approach to software originally developed by open source teams. In open source, developers encourage transparency, shared workloads, continuous feedback and reviews, and robust documentation. Industry reports like DORA’s State of DevOps from researchers Nicole Forsgren, Jez Humble and Gene Kim, and popular DevOps frameworks like CALMS often use these best practices as benchmarks for DevOps success.

Collaboration

Collaboration is at the heart of DevOps. Developers and operations teams regularly communicate about timelines and goals, and everyone is responsible for the project’s success.

Automation

As teams work together and share tools, automation supports consistency, reliability, and efficiency across the organization so it’s easier to discover and troubleshoot problems.

Transparency

Ongoing feedback and open access to repositories encourages collaboration within and outside individual teams. It also promotes InnerSource, the process of using open source best practices to build internal code.

But don’t forget DevSecOps

What is DevSecOps?

Like development and operations, DevSecOps integrates automated security testing into every part of DevOps culture, tooling, and processes.

For many practitioners, security was always meant to be part of DevOps. Instead of happening at the end of the SDLC, DevOps security starts at the source: Code. This approach is commonly known as DevSecOps or “shifting left.” Using automated security tools, developers find and address security vulnerabilities as they code instead of waiting for security teams to address them after deployment. By empowering developers to take responsibility for security throughout the DevOps lifecycle, DevSecOps allows development, operations, and security teams to find and remediate security issues faster.

You fix it and you move forward, because guess what? It takes you a minute to solve that security issue in development when it could potentially take you hours or days to fix in production.

Shamal Siwan // Lead DevOps Engineer/Solutions Architect

What can you do with DevOps?

See how high-performing teams put collaboration and automation to work.

McKesson

Building a cohesive DevOps technology stack.
Explore McKesson

Dell Technologies

Standardizing to support innersource and scalability.
Explore Dell Technologies

The Home Depot

Modernizing infrastructure and developer tooling.
Explore The Home Depot

Dow Jones

Bringing automated security to CI/CD pipelines.
Explore Dow Jones

Autodesk

Improving collaboration and reliability in the cloud.
Explore Autodesk

Start building your DevOps workflow

Whether you’re ready to dive in or still have questions, we’ve got you covered.

Explore best practices

Check out guides, how-to’s, and tips for shipping better software, faster.
Learn more

Get a GitHub demo

See how world-class CI/CD, automation, and security can support your workflow.
Request a demo

Name

Your full name is required.

Work email

A valid email address is required.

Phone number (optional): A phone number is required.

Country: A country is required.

State/Province: A state/province is required.

Yes, I would like to be emailed with the latest news and happenings, products, and special offers from GitHub. If you change your mind, you can unsubscribe at any time. GitHub Privacy Statement

Free Trial

Product

● Features

● Security

● Team

● Enterprise

● Customer stories

● The ReadME Project

● Pricing

● Resources

● Roadmap

Platform

● Developer API

● Partners

● Atom

● Electron

● GitHub Desktop

Support

● Docs

● Community Forum

● Professional Services

● Learning Lab

● Status

● Contact GitHub

Company

● About

● Blog

● Careers

● Press

● Social Impact

● Shop

● GitHub on Twitter

● GitHub on Facebook

● GitHub on YouTube

● GitHub on LinkedIn

● GitHub’s organization on GitHub

●© 2021 GitHub, Inc.

● Terms

● Privacy

● © 2022 GitHub, Inc.

● Terms

● Privacy

Apr	MAY	Jun
	31
2022	2023	2024