<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Release Controls on Kosli&#39;s Software Development Lifecycle</title>
    <link>https://sdlc.kosli.com/controls/release/</link>
    <description>Recent content in Release Controls on Kosli&#39;s Software Development Lifecycle</description>
    <generator>Hugo</generator>
    <language>en-us</language>
    <atom:link href="https://sdlc.kosli.com/controls/release/index.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>Code Review</title>
      <link>https://sdlc.kosli.com/controls/release/code_review/</link>
      <pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate>
      <guid>https://sdlc.kosli.com/controls/release/code_review/</guid>
      <description>Code review is performed on all software changes prior to production deployment, providing peer verification of security, quality, and correctness.</description>
    </item>
    <item>
      <title>Quality Assurance</title>
      <link>https://sdlc.kosli.com/controls/release/quality/</link>
      <pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate>
      <guid>https://sdlc.kosli.com/controls/release/quality/</guid>
      <description>Functionality of software is assured through systematic testing prior to production deployment.</description>
    </item>
    <item>
      <title>Vulnerability Scanning — SAST</title>
      <link>https://sdlc.kosli.com/controls/release/vulnerability_scanning_sast/</link>
      <pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate>
      <guid>https://sdlc.kosli.com/controls/release/vulnerability_scanning_sast/</guid>
      <description>Static Application Security Testing (SAST) analyses application source code to identify security vulnerabilities, coding flaws, and insecure patterns before software is deployed.</description>
    </item>
    <item>
      <title>Vulnerability Scanning — SCA</title>
      <link>https://sdlc.kosli.com/controls/release/vulnerability_scanning_sca/</link>
      <pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate>
      <guid>https://sdlc.kosli.com/controls/release/vulnerability_scanning_sca/</guid>
      <description>Software Composition Analysis (SCA) identifies known vulnerabilities (CVEs) in third-party dependencies, libraries, and other software components before they are deployed to production.</description>
    </item>
    <item>
      <title>Vulnerability Scanning — Containers</title>
      <link>https://sdlc.kosli.com/controls/release/vulnerability_scanning_containers/</link>
      <pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate>
      <guid>https://sdlc.kosli.com/controls/release/vulnerability_scanning_containers/</guid>
      <description>Container images are scanned for operating system and application-level vulnerabilities as part of the build and deployment process.</description>
    </item>
    <item>
      <title>Deployment Approvals</title>
      <link>https://sdlc.kosli.com/controls/release/deployment_approvals/</link>
      <pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate>
      <guid>https://sdlc.kosli.com/controls/release/deployment_approvals/</guid>
      <description>All deployments to production are approved by someone other than the person making the change, meeting segregation of duties requirements.</description>
    </item>
    <item>
      <title>Feature Flags</title>
      <link>https://sdlc.kosli.com/controls/release/feature_flags/</link>
      <pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate>
      <guid>https://sdlc.kosli.com/controls/release/feature_flags/</guid>
      <description>Feature flags provide controlled, gradual exposure of new functionality in production, enabling safe releases and rapid rollback without redeployment.</description>
    </item>
  </channel>
</rss>
