FR-DSO-003 — CI/CD Pipeline Integration

Go to C.3.8 DevSecOps Integration

Crucible SHALL integrate with CI/CD Pipelines.

This requirement derives from:

• Crucible System Requirements Specification, Version 1.1 Draft, Functional Requirements, FR-DSO-003

The Original Requirement states:

The system shall integrate with CI/CD pipelines.[C1]

FR-DSO-003:

• Replaces The system with the defined system name Crucible
• Changes shall to the established uppercase normative form SHALL
• Links CI/CD Pipeline to its controlling definition
• Retains the source behavior integrate with CI/CD pipelines

No other substantive normalization is required.

A CI/CD Pipeline coordinates automated activities that build, test, package, deliver, deploy, or validate changes.

Integration with CI/CD Pipelines enables Crucible operations to participate in automated Workflows initiated or coordinated by pipeline execution.

Such integration can involve:

• Receiving pipeline inputs
• Providing operation parameters
• Initiating Crucible operations
• Receiving operation status
• Returning operation results
• Supplying generated Artifacts
• Supplying validation results
• Supplying Evidence
• Reporting success or failure

This requirement establishes integration with CI/CD Pipelines without prescribing:

• A particular CI/CD product
• A particular pipeline provider
• A pipeline definition format
• A pipeline execution environment
• A triggering mechanism
• An integration protocol
• An application programming interface
• A command-line interface
• A plugin mechanism
• A particular build, deployment, or validation sequence

Separate requirements, architecture specifications, Workflow definitions, and interface definitions govern those subjects and behaviors.

This requirement applies to:

• Crucible
• CI/CD Pipelines
• Pipeline integration operations
• Automated Workflows

Verification confirms that:

1. A CI/CD Pipeline is selected for testing
2. The selected CI/CD Pipeline invokes or coordinates a Crucible operation
3. Crucible receives the information required to perform the selected operation
4. Crucible performs the selected operation
5. Crucible returns an observable status or result to the selected CI/CD Pipeline
6. The observed interaction demonstrates integration with the selected CI/CD Pipeline

The following pages reference this requirement:

Implemented and Verified

Review and approve FR-DSO-003 as a leaf requirement.

Determine whether separate requirements identify the CI/CD Pipeline operations that Crucible must support.

Determine whether separate requirements govern pipeline authentication, authorization, and credential management.

Determine whether separate requirements define the status and result information exchanged between Crucible and a CI/CD Pipeline.

This requirement page retains the stable requirement identifier FR-DSO-003.

This page is a leaf requirement page and omits a trailing :start from its namespace.

The Statement uses the controlling Terms and Definitions entry:

• CI/CD Pipeline

The Statement addresses integration with CI/CD Pipelines. It does not require a particular pipeline product, provider, definition format, execution environment, triggering mechanism, protocol, interface, or plugin mechanism.

FR-DSO-001 governs integration with Git-based Workflows.

FR-DSO-002 governs integration with GitOps Workflows.

FR-DSO-004 through FR-DSO-006 govern automated build, deployment, and validation execution.

Do not add particular pipeline products, integration protocols, interface formats, triggering mechanisms, authentication methods, or automated execution obligations unless the controlling requirement changes through an approved requirements process.

To reference this requirement Statement from another wiki page, insert:

{{section>dido:02-crusible:99-annexes:annex-c-requirements:03-functional-requirements:03-08-devsecops-integration:fr-dso-003#Statement&noheader&nofooter&noeditbtn}}