Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

NIST SP 800-204C

Implementation of DevSecOps for a Microservices-based Application with Service Mesh

Date Published: March 2022


Ramaswamy Chandramouli (NIST)



container orchestration and resource management platform; DevSecOps; CI/CD pipelines; infrastructure as code; policy as code; observability as code; GitOps; workflow models; static AST; dynamic AST; interactive AST; SCA
Control Families

None selected


Download URL

Supplemental Material:
None available

Publication Parts:
SP 800-204
SP 800-204A
SP 800-204B
SP 800-204D

Document History:
09/29/21: SP 800-204C (Draft)
03/08/22: SP 800-204C (Final)