面向安全云计算的持续集成与部署（CI/CD）系统性文献综述
A Systematic Literature Review on Continuous Integration and Deployment (CI/CD) for Secure Cloud Computing
AI总结：
本文通过对66篇论文进行系统性文献综述，梳理云计算中CI/CD安全的工具、方法、挑战与研究空白。
摘要：
随着云环境日益普及，网络安全已成为网络、通信、数据隐私、响应时间和可用性等领域的首要任务。包括工业、医疗保健和政府在内的多个部门近期都遭遇了针对其计算系统的网络攻击。确保云环境中应用程序的安全部署需要大量工作。随着人们对云安全的兴趣不断增长，开展系统性文献综述（SLR）对于识别研究空白至关重要。持续软件工程包括持续集成（CI）、持续交付（CDE）和持续部署（CD），对软件开发与部署至关重要。在我们的SLR中，我们评审了66篇论文，总结了云中CI/CD安全相关的工具、方法和挑战。我们探讨了云安全与CI/CD的关键方面，并报告了Harbor、SonarQube和GitHub Actions等工具。文中重点指出了镜像篡改、未经授权的访问和弱认证等挑战。该综述还揭示了工具和实践在CI/CD流水线中应对这些安全问题方面存在的研究空白，表明需要进一步研究以改进基于云的安全解决方案。
英文摘要：
As cloud environments become widespread, cybersecurity has emerged as a top priority across areas such as networks, communication, data privacy, response times, and availability. Various sectors, including industries, healthcare, and government, have recently faced cyberattacks targeting their computing systems. Ensuring secure app deployment in cloud environments requires substantial effort. With the growing interest in cloud security, conducting a systematic literature review (SLR) is critical to identifying research gaps. Continuous Software Engineering, which includes continuous integration (CI), delivery (CDE), and deployment (CD), is essential for software development and deployment. In our SLR, we reviewed 66 papers, summarising tools, approaches, and challenges related to the security of CI/CD in the cloud. We addressed key aspects of cloud security and CI/CD and reported on tools such as Harbor, SonarQube, and GitHub Actions. Challenges such as image manipulation, unauthorised access, and weak authentication were highlighted. The review also uncovered research gaps in how tools and practices address these security issues in CI/CD pipelines, revealing a need for further study to improve cloud-based security solutions.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
