Copyright © 2026 Authors retain the copyright of this article. This article is an open access article distributed under the Creative Commons Attribution License which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited.

@article{205608,
        author = {Prajwal Patelpaik and Smit RAut and Arya Kasliwal and Srushti Dagade and Prof. Shantanu Pawar},
        title = {Automated CI/CD Pipeline with Jenkins and DevSecOps Integration for Application Deployment},
        journal = {International Journal of Innovative Research in Technology},
        year = {2026},
        volume = {13},
        number = {1},
        pages = {7704-7711},
        issn = {2349-6002},
        url = {https://ijirt.org/article?manuscript=205608},
        abstract = {The increasing frequency of cyberattacks on modern enterprise applications has made security a critical requirement throughout the software development lifecycle. Traditional DevOps practices often prioritize delivery speed and automation while addressing security concerns only during later stages of development, resulting in delayed vulnerability detection, increased remediation costs, and greater production risks. This paper presents the design and implementation of a DevSecOps-driven secure software delivery pipeline for the Ekart Java-based e-commerce application deployed on AWS Elastic Kubernetes Service (EKS). The proposed solution integrates security controls directly into the CI/CD workflow by adopting a shift-left security approach. Automated static application security testing (SAST) is performed using SonarQube with mandatory quality gate enforcement, while OWASP Dependency-Check continuously scans third-party libraries for known vulnerabilities. Secure artifact management is implemented through Nexus Repository Manager, and containerized workloads are deployed on Kubernetes after passing predefined security and quality validations. Infrastructure provisioning is automated using Terraform, ensuring reproducible, secure, and policy-compliant cloud environments. By embedding security, compliance, and governance controls throughout the pipeline, the proposed DevSecOps framework prevents vulnerable code and dependencies from reaching production. Experimental evaluation demonstrates improved vulnerability detection, reduced security review effort, enhanced deployment reliability, and faster delivery of secure software releases. The proposed approach provides a scalable and practical blueprint for implementing DevSecOps in cloud-native enterprise applications.},
        keywords = {AWS EKS, CI/CD Pipeline, DevSecOps, Docker, Infrastructure as Code, Jenkins, Kubernetes, Nexus Repository, OWASP Dependency-Check, Shift-Left Security, SonarQube, Terraform},
        month = {June},
        }