Optimization of Software Development Automation via CICD, Dependency Track, and AWS CodePipeline Integration

Software development automation has become a crucial aspect of modern software engineering practices, aiming to streamline the development lifecycle and enhance overall efficiency. Continuous Integration and Continuous Deployment (CICD) methodologies have emerged as essential to achieving automation goals. However, publication on software development automation using CICD methods incorporating risk mitigation is scarce. This paper proposes an integration method of Dependency Track, a dependency management tool, with Amazon Web Services (AWS) CodePipeline, a popular CICD service provided by the Amazon cloud platform, which can help optimize the security scanning process during software development. The proposed method was implemented into a real software development case, and the automation process ran swiftly between stages and actions, resulting in a total execution time of 3 minutes and 28 seconds. The findings contribute to the understanding of implementing robust software development automation processes, providing valuable insights for organizations seeking to optimize their software delivery pipelines.