Software deployment workforce selection using security-based policy selection

An apparatus comprising:

• at least one processing device comprising a processor coupled to a memory;
• the at least one processing device being configured to implement the following steps:
• obtaining one or more first data structures comprising data characterizing a plurality of security skillset grades for respective ones of a plurality of workforce personnel associated with at least a portion of a software deployment pipeline;
• obtaining one or more second data structures comprising data characterizing a plurality of workforce selection policies applicable to one or more microservices of an application associated with the software deployment pipeline, wherein the plurality of workforce selection policies specifies a security skillset grade required for one or more workforce personnel;
• assigning a security weight to a given microservice of the application by performing a processor-based aggregation, using at least one processing device, of one or more security weights for respective ones of one or more application programming interfaces of the given microservice, wherein the one or more security weights are (i) obtained from one or more online data sources and (ii) associated with respective ones of a plurality of security risks associated with the application programming interfaces of the given microservice;
• identifying, for the given microservice of the application, a given workforce selection policy, from the one or more second data structures, applicable to the given microservice, wherein the given workforce selection policy is identified based at least in part on the security weight assigned to the given microservice;
• automatically selecting, by the at least one processing device, one or more of the plurality of workforce personnel to perform one or more tasks related to at least a portion of the given microservice, wherein the automatically selecting is based at least in part on a processor-based comparison of the plurality of security skillset grades, from the one or more first data structures, for the respective ones of the plurality of workforce personnel and the security skillset grade required for one or more workforce personnel specified in the given workforce selection policy, from the one or more second data structures, applicable to the given microservice;
• and
• automatically initiating at least one automated action in response to an occurrence of at least one designated event,
• wherein the at least one designated event comprises at least one of:
• (i) a request to review one or more code changes to the given microservice of the application, (ii) a request to merge one or more code changes to the given microservice of the application with a main branch of the given microservice of the application, (iii) a request to approve one or more code changes to the given microservice of the application, (iv) a request to approve a merger of one or more code changes to the given microservice of the application with a main branch of the given microservice of the application and (v) a request to release at least a portion of software code of the given microservice of the application to a production environment, and
• wherein the at least one automated action comprises (i) verifying, for the given microservice of the application, whether one or more of the selected workforce personnel have the security skillset grade specified in the given workforce selection policy applicable to the given microservice to obtain a security verification result and (ii) automatically denying at least one request associated with the at least one designated event in response to the security verification result.

A non-transitory processor-readable storage medium having stored therein program code of one or more software programs, wherein the program code when executed by at least one processing device causes the at least one processing device to perform the following steps:

• obtaining one or more first data structures comprising data characterizing a plurality of security skillset grades for respective ones of a plurality of workforce personnel associated with at least a portion of a software deployment pipeline;
• obtaining one or more second data structures comprising data characterizing a plurality of workforce selection policies applicable to one or more microservices of an application associated with the software deployment pipeline, wherein the plurality of workforce selection policies specifies a security skillset grade required for one or more workforce personnel;
• assigning a security weight to a given microservice of the application by performing a processor-based aggregation, using at least one processing device, of one or more security weights for respective ones of one or more application programming interfaces of the given microservice, wherein the one or more security weights are (i) obtained from one or more online data sources and (ii) associated with respective ones of a plurality of security risks associated with the application programming interfaces of the given microservice;
• identifying, for the given microservice of the application, a given workforce selection policy, from the one or more second data structures, applicable to the given microservice, wherein the given workforce selection policy is identified based at least in part on the security weight assigned to the given microservice;
• automatically selecting, by the at least one processing device, one or more of the plurality of workforce personnel to perform one or more tasks related to at least a portion of the given microservice, wherein the automatically selecting is based at least in part on a processor-based comparison of the plurality of security skillset grades, from the one or more first data structures, for the respective ones of the plurality of workforce personnel and the security skillset grade required for one or more workforce personnel specified in the given workforce selection policy, from the one or more second data structures, applicable to the given microservice;
• and
• automatically initiating at least one automated action in response to an occurrence of at least one designated event,
• wherein the at least one designated event comprises at least one of:
• (i) a request to review one or more code changes to the given microservice of the application, (ii) a request to merge one or more code changes to the given microservice of the application with a main branch of the given microservice of the application, (iii) a request to approve one or more code changes to the given microservice of the application, (iv) a request to approve a merger of one or more code changes to the given microservice of the application with a main branch of the given microservice of the application and (v) a request to release at least a portion of software code of the given microservice of the application to a production environment, and
• wherein the at least one automated action comprises (i) verifying, for the given microservice of the application, whether one or more of the selected workforce personnel have the security skillset grade specified in the given workforce selection policy applicable to the given microservice to obtain a security verification result and (ii) automatically denying at least one request associated with the at least one designated event in response to the security verification result.