2021年全球开发、安全和运营专业人士报告（英）-27页_501kb

Summary of the 2021 DevSecOps Landscape Survey

Core Content

The 2021 DevSecOps landscape survey collected responses from 4300 participants, highlighting the ongoing evolution of DevOps and DevSecOps practices across the industry. The results reflect a shift from theoretical discussions to practical implementation, driven by the challenges of the global pandemic. Teams are increasingly focused on automation, security, and technology integration, with DevOps and DevSecOps becoming more central to their workflows.

Main Findings

DevOps Adoption and Impact

• DevOps/DevSecOps Usage: 35.9% of teams use DevOps or DevSecOps, up from 27% in 2020.
• Release Speed: 60% of developers are releasing code twice as fast, with 19% reporting 10x faster releases.
• Automation Growth:
  • 25% of teams report full test automation.
  • 28% are at least halfway there.
  • 34% of developers test some of their own code.
  • 32% use automated testing as they write code.
• CI/CD and AI/ML: CI/CD remains central, with AI/ML usage increasing to 11.5% from 4% in 2020.
• Toolchain:
  • Git is used by 85% of respondents.
  • GitLab is the most used CI/CD tool (34%).
  • Kubernetes adoption rose to 46% from 38% in 2020.
  • Low code/no code tools are now used by 41% of teams, up from 75% who said they don’t use them in 2020.

DevOps Platform

• Usage: 70% of teams use a DevOps platform, with benefits including better collaboration, automation, and visibility.
• Platform Impact:
  • 23% said everyone in their company uses the platform.
  • Top benefits: faster delivery, immediate feedback, security integration, and reduced MTTR.

Testing Challenges

• Testing Bottlenecks: Testing remains the primary cause of release delays, with 42% of respondents citing it.
• Testing Practices:
  • 25% of teams have no test automation or are just starting.
  • 9% admit they haven’t shifted testing far enough left.
• Testing Improvements:
  • 25% report full test automation.
  • 34% are exploring AI/ML for testing.
  • 28% use bots to test code.
  • 16% use AI/ML to review code before a human sees it.

Developer Roles and Priorities

• Developer Responsibilities: Developers are taking on more ops responsibilities, with 38% defining or creating infrastructure for their apps.
• Code Review:
  • 45% review code weekly.
  • 22% do it bi-weekly.
  • 60% find code reviews very valuable for security and code quality.
• Developer Priorities:
  • 43% set their own priorities.
  • 38% are influenced by product managers.
  • 19% are influenced by the business side.
• Future Skills:
  • 30% of developers believe understanding AI/ML is critical for their future careers.
  • 18% value soft skills like communication and collaboration.
  • 14% are interested in GitOps.

Security Trends

• Security Ownership:
  • 30.73% of respondents believe the security team is primarily responsible.
  • 27.88% think everyone is responsible.
  • 20.91% believe developers are responsible.
• Security Perception:
  • 72% of security pros rate their organizations’ security efforts as “good” or “strong.”
  • 13% increase in optimism compared to 2020.
• Shift Left Security:
  • 70% of security pros report their teams have shifted left.
  • 53% of developers run SAST scans, up from 40% in 2020.
  • 44% run DAST scans, up from 27%.
• Security Challenges:
  • 42% of teams report testing happens too late in the process.
  • 37% find it difficult to track bug fix status.
  • 33% struggle to prioritize remediation.
  • 32% find it hard to find someone to fix bugs.

Key Information

• Release Frequencies:
  • 28% deploy continuously (multiple times a day).
  • 15% deploy once a week.
  • 10% deploy once a month.
• Open Source Involvement:
  • Over 69% of respondents participate in open source projects.
  • 29% contribute to GitLab.
  • 14% are involved with Kubernetes.
  • 13% use VS Code.
• Team Composition:
  • 41.67% are Software Developers/Engineers.
  • 23% of teams have everyone using the DevOps platform.
• Career Priorities:
  • Developers prioritize AI/ML (30%), soft skills (18%), and GitOps (14%).
  • Security pros prioritize subject matter expertise (18%) and soft skills (18%).
  • Operations prioritize advanced programming (18%).

Future Outlook

• DevOps Evolution: Teams are moving from culture discussions to actual implementation and measurable results.
• AI/ML Integration:
  • 75% of teams are using or planning to use AI/ML for test/code review.
  • 41% use AI/ML for testing.
• Microservices and Kubernetes:
  • 34% fully use microservices.
  • 46% use Kubernetes.
• Testing and Security Collaboration:
  • Testing and security are still in early stages of integration.
  • Developers are increasingly involved in security, but the process is not yet fully mature.

Anecdotal Insights

• Testing Issues:
  • “Testing delays everything.”
  • “Code review can take several days.”
  • “Testing is not yet fully automated in the deployment cycle.”
• DevOps Challenges:
  • “We are not relying on developers to remember to create and run tests.”
  • “We are currently using the same technology stack from five years ago.”
• Positive Trends:
  • “We are releasing code globally with automated deployments.”
  • “We divide and conquer: splitting code into modules helps reduce debug time.”
  • “We are moving to Kubernetes this year.”

Conclusion

The 2021 DevSecOps survey indicates that teams are maturing in their DevOps and DevSecOps practices, with a strong focus on automation, security, and technology integration. While there are still challenges in testing and security ownership, the trend is clear: teams are moving towards more collaborative, integrated, and efficient workflows. The role of the DevOps platform is growing, and the use of AI/ML is on the rise, signaling a future where automation and intelligence drive software development and security.