Case Study: United States Department of Defense builds a secure DevSecOps pipeline with Anchore

U.S. Department of Defense speeds DevSecOps to minutes with Anchore

The United States Department of Defense faced the challenge of modernizing its slow, waterfall-driven software development processes to deliver secure applications at the speed required for modern warfare. To overcome this, they partnered with Anchore and Red Hat to build a new DevSecOps platform, aiming to automate security and compliance checks for containerized software.

Anchore implemented its container analysis platform to harden and secure software containers as part of the DoD's DevSecOps pipeline. The solution automated security scanning and policy enforcement, enabling the creation of a centralized repository of pre-approved, hardened containers called Iron Bank. This allowed the DoD to significantly reduce the time to achieve Authority to Operate (ATO) from 9-12 months to minutes, accelerating development and enhancing security compliance.

United States Department of Defense