Optimizing the Developer DevSecOps Experience for Embedded Systems

Providing software developers with flexible, fast workflows in which they receive the information they need at the time they need it is crucial, especially in embedded systems.

Embedded systems have strict security, safety, and quality standards to adhere to. Building guidance for these standards into the workflow makes developers more efficient, allows them to learn as they go, and ultimately reduces risk while helping the team meet deadlines.

These workflows include static and dynamic testing, testing on hardware, server-based and local build options, as well as hardware-based debug workflows.

GitLab has extensive support to automate all these actions, which is what we’ll demonstrate during this presentation.

• Drive all actions through an IDE (VS Code)
• Use Merge Requests to track all actions
• Use AI to automate common programming tasks
• Use Security Policies to drive security fixes before merges
• Find deep security findings and remediate them easily using CodeSonar
• Automate testing on hardware in a remote hardware lab

This in-workflow pipeline automation saves engineers many hours per month, allowing them to spend more time building secure and safe software.

All artifacts used during this presentation are publicly available, and links will be provided.