Best Practices Evidenced for Software Development Based on DevOps and Scrum: A Literature Review
Abstract
:1. Introduction
2. Research Method
2.1. Planning
2.1.1. Scope of the Review
2.1.2. Research Questions
- RQ1: What factors are fundamental to success in implementing Scrum?
- RQ2: What factors are fundamental to success in implementing DevOps?
- RQ3: What are the common DevOps practices documented in the literature?
- RQ4: What practices are common for both Scrum and DevOps?
2.1.3. Search Strategy
- Initial identification of key terms: based on research questions and common terms in preliminary studies (e.g., “Scrum”, “DevOps”, and “best practices”);
- Validation and refinement: the search string was validated using a test set of known studies and refined to maximize retrieval of relevant documents;
- Scopus: ALL ((Scrum OR Agile OR agility) AND (DevOps OR “development and operation”) AND (“best practice”);
- WoS = (ALL = ((Scrum OR Agile OR agility) AND (DevOps OR “development and operation”) AND (“best practices”)));
2.1.4. Inclusion and Exclusion Criteria
- Papers not written in English;
- Presentations, tutorials, and anecdotal opinions;
- Papers that do not specifically address software development practices;
- Papers published before 2014 or after 2023.
- Peer-reviewed papers published in English;
- Papers from journals, books, and conference proceedings.
2.2. Quality Assessment
- Are the review’s inclusion and exclusion criteria described and appropriate?
- Is the literature search likely to have covered all relevant studies?
- Did the reviewers assess the quality/validity of the included studies?
- Were the basic data/studies adequately described?
- To minimize bias in the initial quality assessment, three reviewers were randomly assigned to each study from the pool of reviewers;
- Each reviewer independently assessed the quality of the paper based on the predefined quality criteria adopted from Kitchenham et al. [11]. They answered the specific quality questions described above for each criterion and provided justifications for their evaluations;
- The three researchers then compared their assessments, discussed any discrepancies, and collaboratively arrived at a consensus score for each quality criterion;
- To further enhance reliability, an additional independent reviewer, blinded to the initial assessments, reviewed all quality assessments, providing their answers and justifications. Any discrepancies between the consensus scores and the independent reviewer’s scores were resolved through discussion with the initial three reviewers.
2.3. Papers Data Extraction and Analysis Process
- Identify the article (author, title, abstract, year of publication, category (Scrum, DevOps, or both), contribution, advantage, disadvantage, gap, and DOI/Link);
- Determine the relevant thematic categories to answer the research questions.
2.4. Performing the Review
- Initial search: retrieval of 378 documents using the search strings;
- Filtering by title and abstract: exclusion of irrelevant and duplicate documents (267 removed);
- Full-text review: Each article was assigned to four researchers randomly for review, ensuring disagreements were discussed and resolved collaboratively. The process resulted in the selection of 111 papers aligned with the research questions;
- Snowballing: The literature search iteratively expanded through forward snowballing according to the process suggested by Wohlin [10], aiming to uncover publications that cited foundational works in the domain and introduced significant conceptual, methodological, or practical information not already represented in the existing review corpus. By this means, the inclusion of two additional documents identified through the references in the selected studies [7,12] was achieved.
3. Results
3.1. What Factors Are Fundamental to Success in Implementing Scrum?
- Actively involve the stakeholders. This factor, cited in 61.9% of the analyzed studies, emphasizes the critical role of engaging stakeholders throughout the project. It is highlighted as essential for aligning project objectives with stakeholder expectations and ensuring that deliverables meet their requirements. Key studies, including those by the authors of [5,11,16,17,18,20,21,22,25,26,28,29,30], consistently recognize stakeholder involvement as a cornerstone of project success;
- Early and continuous feedback. Cited in 61.9% of the papers analyzed, this factor underscores the importance of providing timely and ongoing feedback throughout the project lifecycle. It ensures that adjustments can be made promptly, reducing risks and enhancing the quality of deliverables. Studies such as those by [5,14,15,16,17,18,20,21,22,23,26,29,30] highlight this practice as fundamental for aligning project outcomes with evolving requirements and stakeholder expectations;
- Transparent communication channel. Cited in 52.4% of the papers analyzed, this factor emphasizes the importance of maintaining clear, open, and effective communication throughout the project. Transparent communication ensures that all team members and stakeholders are aligned, minimizing misunderstandings and facilitating prompt decision-making. Key studies by the authors of [5,11,14,16,17,18,21,24,25,27,28] consistently highlight transparent communication as a critical component for project success;
- Constant quality measurement or concurrent testing. Cited in 38.1% of the analyzed papers, this factor highlights the critical role of continuous quality measurement and testing throughout the project. By integrating testing into every phase, teams can identify and address issues early, ensuring that the final product meets the required standards. Studies by the authors of [5,11,16,17,21,22,29,30] emphasize the value of ongoing quality assessment and testing in maintaining high standards and reducing defects;
- Delivering high-quality outputs. A total of 38.1% of the papers emphasize the importance of consistently delivering high-quality outputs throughout the project lifecycle. Achieving quality deliverables ensures that the project meets stakeholder expectations, enhances customer satisfaction, and reduces the requirement for rework. Key studies by the authors of [11,15,18,19,21,22,23,24] consistently highlight the central role of quality in successful project execution and delivery.
3.2. What Factors Are Fundamental to Success in Implementing DevOps?
- Versioning. Identified in 59% of the papers analyzed, this practice is highlighted as critical for managing changes in code and ensuring traceability throughout the software development process. By enabling teams to track modifications, resolve conflicts, and maintain a history of changes, versioning contributes to the stability and reliability of projects. Key studies, including those by the authors of [37,38,39,40,41,42,44,46,47,48,49,50,51,53,54,55,56,57,63,64,65], emphasize its foundational role in effective DevOps and Agile practices;
- Automation of pipeline operations. Mentioned in 57% of the papers, this practice is recognized as a cornerstone of DevOps implementation, enabling streamlined and efficient software delivery. Automating pipeline operations, such as code integration, testing, and deployment, reduces manual effort, minimizes errors, and accelerates development cycles. Key studies, including [37,38,39,40,41,42,44,46,47,48,49,50,51,53,54,55,56,57,63,64,65], highlight how this automation fosters reliability and scalability in software development processes;
- Creation of a collaborative culture. Cited in 51% of the papers, establishing a collaborative culture is fundamental for fostering effective teamwork and ensuring smooth integration between development and operations teams. This practice encourages open communication, knowledge sharing, and mutual support, enhancing problem-solving and innovation. Studies by the authors of [31,32,33,34,35,42,43,44,45,50,53,54,55,59,63,64,65,66,67] underline the importance of nurturing this culture to improve collaboration and achieve successful outcomes in DevOps environments;
- Continuous integration. Mentioned in 49% of the papers, this practice is recognized as key for ensuring high-quality software’s seamless and rapid delivery. By continuously integrating code changes into a shared repository and running automated tests, teams can detect errors early, streamline the development process, and maintain consistent software quality. Studies by the authors of [37,38,39,40,41,42,44,45,46,47,49,50,56,57,63,64,65,67] remark on the role of continuous integration in improving the efficiency and reliability of the software development process;
- Automated testing. Mentioned in 49% of the papers, this practice is highlighted as crucial for improving software quality and accelerating development. By automating repetitive testing tasks, teams can quickly identify defects, ensure consistent test coverage, and maintain high-quality standards throughout the development lifecycle. Key studies, including those by the authors of [37,38,39,40,41,42,44,45,46,47,49,50,56,57,60,64,65,66,67], emphasize the role of automated testing in enhancing efficiency, reliability, and scalability within development pipelines.
Practice/Reference | [31] | [32] | [33] | [34] | [35] | [36] | [37] | [38] | [39] | [40] | [41] | [42] | [43] | [44] | [45] | [46] | [47] | [48] | [49] |
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Step-by-step involvement in the organizational culture. | X | X | X | X | X | X | X | ||||||||||||
Understanding the practices and their benefits. | X | X | X | X | X | X | X | X | X | ||||||||||
Creation of a collaborative culture. | X | X | X | X | X | X | X | X | X | ||||||||||
Gradually implementing the practices that allow a culture of continuous improvement. | X | X | X | X | |||||||||||||||
Constant communication. | X | ||||||||||||||||||
Global understanding of the responsibilities of the entire team. | X | X | X | ||||||||||||||||
Continuous generation of information. | X | ||||||||||||||||||
Constant feedback. | X | X | X | X | X | ||||||||||||||
Transparent sharing of the quality of the project’s progress. | X | X | |||||||||||||||||
Involving security. | X | ||||||||||||||||||
Automation of pipeline operations. | X | X | X | X | X | X | X | X | X | X | X | ||||||||
Continuous integration. | X | X | X | X | X | X | X | X | X | X | X | ||||||||
Continuous deployment. | X | X | X | X | X | X | X | X | X | ||||||||||
Automated testing. | X | X | X | X | X | X | X | X | X | X | X | ||||||||
Monitoring. | X | X | X | X | X | X | X | X | X | ||||||||||
Continuous delivery. | X | X | X | X | X | X | X | ||||||||||||
Strategic indicators, factors, and metrics to evaluate associated with tools by models such as Qrapids. | X | ||||||||||||||||||
Versioning. | X | X | X | X | X | X | X | X | X | X | X | X |
Practice/Reference | [50] | [51] | [52] | [53] | [54] | [55] | [56] | [57] | [58] | [59] | [60] | [61] | [62] | [63] | [65] | [65] | [66] | [67] |
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Step-by-step involvement in the organizational culture. | X | X | X | X | X | X | ||||||||||||
Understanding the practices and their benefits. | X | X | X | X | X | X | ||||||||||||
Creation of a collaborative culture. | X | X | X | X | X | X | X | X | X | X | ||||||||
Gradually implementing the practices that allow a culture of continuous improvement. | X | X | X | X | ||||||||||||||
Constant communication. | X | X | X | X | ||||||||||||||
Global understanding of the responsibilities of the entire team. | ||||||||||||||||||
Continuous generation of information. | X | X | X | X | X | |||||||||||||
Constant feedback. | X | X | X | X | ||||||||||||||
Transparent sharing of the quality of the project’s progress. | X | X | X | X | X | X | X | |||||||||||
Involving security. | X | X | X | X | X | |||||||||||||
Construction of operational platforms. | X | X | ||||||||||||||||
Infrastructure as code. | X | X | ||||||||||||||||
Infrastructure management. | X | X | X | |||||||||||||||
Automation of pipeline operations. | X | X | X | X | X | X | X | X | X | X | ||||||||
Continuous integration. | X | X | X | X | X | X | X | |||||||||||
Continuous deployment. | X | X | X | X | X | X | ||||||||||||
Automated testing. | X | X | X | X | X | X | X | |||||||||||
Monitoring. | X | X | X | X | X | |||||||||||||
Continuous delivery. | X | X | X | X | X | X | ||||||||||||
Strategic indicators, factors, and metrics to evaluate associated with tools by models such as Qrapids. | ||||||||||||||||||
Versioning. | X | X | X | X | X | X | X | X | X | X | ||||||||
Actively involve the user. | X | X | X | X |
3.3. What Are the Common DevOps Practices Documented in the Literature?
- Continuous integration. Cited in 72.3% of the analyzed papers, continuous integration (CI) is widely recognized as a fundamental practice in modern software development processes. CI involves frequently integrating code changes into a shared repository, followed by automated testing to detect and resolve issues early. This approach enhances software quality, reduces integration risks, and accelerates delivery cycles. Key studies, including [68,69,70,73,74,75,76,77,78,79,80,81,84,87,88,89,90,91,92,93,94,96,99,100,101,102,103,104,105,106,109,110,111,114,115,117,118], emphasize the role of CI in fostering reliable and scalable software delivery pipelines, making it a cornerstone of DevOps and Agile frameworks;
- Versioning. Cited in 68.1% of the analyzed papers, versioning is recognized as a fundamental practice for managing code changes and ensuring traceability throughout the software development lifecycle. By maintaining a systematic history of modifications, versioning allows teams to track changes, facilitate collaboration, resolve conflicts, and improve code stability. Studies such as [68,69,70,73,74,75,76,77,78,79,80,81,84,87,88,89,90,91,92,93,94,96,99,100,101,102,103,104,105,106,109,110,111,114,115,117,118] highlight versioning as a fundamental practice for improving the software development process and implementing other practices, such as continuous integration and deployment pipelines, reducing risks associated with code integration, and enhancing software quality;
- Continuous deployment. Cited in 68.1% of the papers analyzed, continuous deployment (CD) is highlighted as a key practice for automating software releases to production environments. CD reduces manual intervention, accelerates delivery cycles, and enhances software reliability by seamlessly deploying tested and validated code changes. Studies such as [68,69,70,73,74,75,76,77,78,79,80,81,84,87,88,89,90,91,93,94,96,99,100,101,103,104,105,106,109,110,111,115,117,118] underscore the importance of CD in enabling a continuous delivery pipeline, ensuring that high-quality software is consistently delivered with minimal disruption;
- Cloud computing. As mentioned in 34% of the papers analyzed, cloud computing is recognized as a key enabler for modern software development and deployment processes. By providing scalable infrastructure, on-demand resources, and flexible computing environments, cloud computing supports the efficient implementation of DevOps practices, such as continuous integration, continuous deployment, and automated testing. Studies including [68,69,70,71,72,73,74,75,76,77,78,79,80,81,102,113] remark on the role of cloud computing in reducing infrastructure costs, improving resource utilization, and enabling rapid provisioning of development and production environments. Cloud computing is, thus, a foundational technology for achieving scalability, flexibility, and efficiency in software delivery pipelines;
- Infrastructure as code (IaC). As mentioned in 34% of the analyzed papers, infrastructure as code (IaC) is recognized as a critical practice for automating the management and provisioning of infrastructure through code. IaC enhances consistency, reduces manual errors, and accelerates deployment processes by treating infrastructure configurations as versioned and executable scripts. Key studies, including [72,73,74,75,76,77,78,79,80,81,90,91,96,102,103], focus on how IaC supports integrating DevOps practices, facilitating other practices such as continuous deployment, and ensuring that infrastructure changes are systematically tested and documented;
- Automated testing. As mentioned in 31.9% of the papers analyzed, automated testing is highlighted as a key practice for ensuring software quality and accelerating the software development process. By automating the test execution, teams can efficiently detect defects early, improve test coverage, and reduce manual effort, ultimately leading to faster and more reliable software releases. Studies such as [81,87,88,90,91,99,100,101,103,105,106,107,109,110,111,112,116] underscore the importance of automated testing in maintaining software stability and enabling teams to deliver high-quality products efficiently;
- Unit testing. As mentioned in 29.8% of the papers, unit testing is highlighted as essential for ensuring the correctness and reliability of individual components or functions within the software. By isolating and testing small units of code, unit testing enables the early detection of errors, supports better code design, and improves the overall maintainability of the system. Key studies, including [81,87,88,89,90,91] and [99,100,101,103,104,106,110,111,112,116,117,118], emphasize unit testing as a key practice for achieving high software quality and facilitating the early identification of issues, which contributes to more efficient and reliable development processes;
- Static code analysis (SCA). As mentioned in 29.8% of the papers analyzed, unit testing is recognized as a critical practice for validating the functionality of individual components or modules in software development. By isolating and testing small code units, teams can identify defects early, ensure code reliability, and support maintainability throughout the development lifecycle. Key studies, including [68,81,84,87,88,94,99,104,105,106,107,109,110,111], emphasize its role in supporting continuous integration and reducing the likelihood of errors propagating through later stages of development;
- Continuous monitoring. As mentioned in 27.7% of the papers analyzed, continuous monitoring is identified as a key practice for maintaining system performance, reliability, and security throughout the software lifecycle. Continuous monitoring enables teams to detect anomalies early, reduce downtime, and ensure consistent service delivery by providing real-time insights into application behavior, infrastructure health, and potential issues. Studies such as [88,90,91,93,94,99,102,103,105,109,110,111,112,114,116] mentioned continuous monitoring as essential for supporting DevOps practices, enabling proactive maintenance, and ensuring the stability of software systems in production environments;
- Continuous improvement. As mentioned in 21.3% of the papers analyzed, continuous improvement is recognized as a vital practice for enhancing processes, products, and services over time. By fostering a culture of ongoing refinement and iteration, teams can adapt to changing requirements, optimize workflows, and enhance overall performance. Studies such as [82,83,84,90,91,92,94,97,99,104,107,114,115,116,117,118] emphasize the role of continuous improvement in supporting Agile and DevOps practices, ensuring that teams can deliver higher quality and more efficient solutions through iterative learning and adaptation.
3.4. Challenges and Mitigation Strategies for Integrating Scrum and DevOps in VSEs
3.4.1. Cultural Challenges
3.4.2. Technical Limitations
3.4.3. Process-Related Challenges
3.4.4. Resource Challenges
3.5. What Practices Are Common for Both Scrum and DevOps?
- Actively involving the stakeholders;
- Early and continuous feedback;
- Transparent communication channels.
Practice/Reference | [119] | [120] | [121] |
---|---|---|---|
Actively involving the stakeholders | X | X | X |
Early and continuous feedback | X | X | X |
Transparent communication channels | X | X | X |
3.5.1. About the Agile Software Development Approach
3.5.2. Suggestions for the Implementation of Both Frameworks
3.5.3. The Future of Software Development
3.6. Empirical Evidence for Scrum and DevOps Benefits
3.7. Quantitative Evidence of Scrum and DevOps Benefits
3.7.1. Productivity Gains and Delivery Speed
3.7.2. Software Quality Improvements
3.7.3. Cost and Risk Reduction Through Early Testing and Security Measures
3.7.4. Scaling Agile in Large Organizations
4. Discussion
4.1. Context of the Results
4.2. Comparison with Previous Work
4.3. Interpretation of the Results
4.4. Threats to Validity
4.4.1. Construct Validity
4.4.2. Internal Validity
- The inclusion and exclusion of studies depended partly on interpreting titles and abstracts, which could have led to the exclusion of relevant papers;
- The qualitative analysis was based on a thematic process that, although systematic, can be influenced by the subjectivity of the researchers. We employed a peer review of the identified categories and patterns to mitigate this, although bias was not eliminated.
4.4.3. External Validity
4.4.4. Validity of Conclusion
4.4.5. Other Limitations
4.4.6. Mitigation
- Refine search strings iteratively and apply multiple recognized databases (Scopus and Web of Science);
- Establish clear inclusion and exclusion criteria complemented by the snowballing technique;
- Cross-review among researchers to minimize bias in data selection and analysis;
- Explicitly document the context of primary studies to interpret the results according to their particularities.
5. Conclusions and Future Directions
Author Contributions
Funding
Data Availability Statement
Acknowledgments
Conflicts of Interest
Abbreviations
VSEs | Very small entities |
CI | Continuous integration |
CD | Continuous deployment |
DevOps | Development and operations |
IaC | Infrastructure as code |
SCA | Static code analysis |
TDD | Test-driven development |
BDD | Behavior-driven development |
References
- Pastrana, M.A.; Ordoñez, H.A.; Cobos, C. ISO 29110 En Colombia: De La Teoría a La Práctica. Rev. Guillermo De Ockham 2019, 17, 71–80. [Google Scholar] [CrossRef]
- Hastie, S.; Wojewoda, S. Standish Group 2015 Chaos Report-Q&A with Jennifer Lynch. Available online: http://www.infoq.com/articles/standish-chaos-2015 (accessed on 20 March 2025).
- Annous, H.; Livadas, L.; Miles, G. OffshoreQA: A Framework for Helping Software Development Outsourcing Companies Comply with ISO 9001:2008. In Proceedings of the 5th International Conference on Global Software Engineering, ICGSE, Princeton, NJ, USA, 23–26 August 2010; pp. 313–315. [Google Scholar]
- Schwaber, K.; Sutherland, J. La Guía de Scrum. La Guía Definitiva de Scrum: Las Reglas Del Juego. 2017. Available online: https://scrumguides.org/docs/scrumguide/v2017/2017-Scrum-Guide-Spanish-SouthAmerican.pdf (accessed on 20 March 2025).
- Pastrana Pardo, M.A.; Ordóñez Erazo, H.A.; Cobos Lozada, C.A. Approach to the Best Practices of Software Development Based on DevOps and SCRUM Used in Very Small Entities. Rev. Fac. Ing. 2022, 31, e14828. [Google Scholar] [CrossRef]
- Ordóñez, H.A.; Buchelli, V. Lineamientos Para La Implementación Del Modelo CALMS de DevOps En Mipymes Desarrolladoras de Software En El Contexto Sur Colombiano. Rev. Guillermo Ockham 2020, 18, 81–91. [Google Scholar] [CrossRef]
- Kniberg, H. Scrum and XP from the Trenches: How We Do Scrum; Lulu Press, Inc.: Morrisville, NC, USA, 2007; Available online: https://www.agileleanhouse.com/lib/lib/People/HenrikKniberg/ScrumAndXpFromTheTrenchesonline07-31.pdf (accessed on 20 March 2025).
- Kitchenham, B.; Charters, S. Guidelines for Performing Systematic Literature Reviews in Software Engineering Version 2.3. Engineering 2007, 45, 1051. [Google Scholar] [CrossRef]
- Inayat, I.; Salim, S.S.; Marczak, S.; Daneva, M.; Shamshirband, S. A Systematic Literature Review on Agile Requirements Engineering Practices and Challenges. Comput. Hum. Behav. 2015, 51, 915–929. [Google Scholar] [CrossRef]
- Wohlin, C. Guidelines for Snowballing in Systematic Literature Studies and a Replication in Software Engineering. In Proceedings of the 18th International Conference on Evaluation and Assessment in Software Engineering, London, UK, 13–14 May 2014. [Google Scholar] [CrossRef]
- Kitchenham, B.; Pretorius, R.; Budgen, D.; Pearl Brereton, O.; Turner, M.; Niazi, M.; Linkman, S. Systematic Literature Reviews in Software Engineering–A Tertiary Study. Inf. Softw. Technol 2010, 52, 792–805. [Google Scholar] [CrossRef]
- Schwaber, K.; Sutherland, J. La Guía de Scrum. La Guía Definitiva de Scrum: Las Reglas Del Juego. 2020. Available online: https://scrumguides.org/docs/scrumguide/v2020/2020-Scrum-Guide-Spanish-Latin-South-American.pdf (accessed on 20 March 2025).
- Matook, S.; Maruping, L.M. A Competency Model for Customer Representatives in Agile Software Development Projects. MIS Q. Exec. 2014, 13, 77–95. [Google Scholar]
- Wawryk, V.J.; Krenn, C.; Dietinger, T. Scaling a Running Agile Fix-Bid Project with near Shoring: Theory vs. Reality and (Best) Practice. In Proceedings of the 2015 IEEE 8th International Conference on Software Testing, Verification and Validation Workshops, ICSTW 2015-Proceedings, Graz, Austria, 13–17 April 2015. [Google Scholar]
- Muñoz, M.; Mejia, J.; Corona, B.; Calvo-Manzano, J.A.; San Feliu, T.; Miramontes, J. Analysis of Tools for Assessing the Implementation and Use of Agile Methodologies in SMEs. In Software Process Improvement and Capability Determination: 16th International Conference, SPICE 2016, Dublin, Ireland, 9–10 June 2016, Proceedings; Communications in Computer and Information Science Series; Springer: Cham, Switzerland, 2016; Volume 609, pp. 123–134. [Google Scholar]
- Chen, H.-M.; Kazman, R.; Haziyev, S. Agile Big Data Analytics Development: An Architecture-Centric Approach. In Proceedings of the IEEE 2016 49th Hawaii International Conference on System Sciences (HICSS), Koloa, HI, USA, 5–8 January 2016; pp. 5378–5387. [Google Scholar]
- Hobbs, B.; Petit, Y. Agile Methods on Large Projects in Large Organizations. Proj. Manag. J. 2017, 48, 3–19. [Google Scholar] [CrossRef]
- Spurrier, G.; Topi, H. When Is Agile Appropriate for Enterprise Software Development? In Proceedings of the 25th European Conference on Information Systems, ECIS 2017, Guimarães, Portugal, 5–10 June 2017; pp. 2536–2545. [Google Scholar]
- Carroll, N.; O’Connor, M.; Edison, H. The Identification and Classification of Impediments in Software Flow. In Proceedings of the Americas Conference on Information Systems 2018: Digital Disruption, AMCIS 2018, New Orleans, LA, USA, 16–18 August 2018. [Google Scholar]
- Klünder, J.; Hohl, P.; Küpper, S.; Krusche, S.; Lous, P.; Fazal-Baqaie, M.; Prause, C.R. Towards Understanding the Motivation of German Organizations to Apply Certain Software Development Methods. In Product-Focused Software Process Improvement: 19th International Conference, PROFES 2018, Wolfsburg, Germany, 28–30 November 2018, Proceedings; Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Springer: Cham, Switzerland, 2018; Volume 11271, pp. 449–456. [Google Scholar]
- Almeida, F.; Simões, J. Moving from Waterfall to Agile: Perspectives from IT Portuguese Companies. Int. J. Serv. Sci. Manag. Eng. Technol. 2019, 10, 30–43. [Google Scholar] [CrossRef]
- Bajpai, S.; Eppinger, S.D.; Joglekar, N.R. The Structure of Agile Development Under Scaled Planning and Coordination. In Proceedings of the 21st International DSM Conference, Monterey, UK, 25 September 2019; The Design Society: Glasgow, UK; pp. 25–34. [Google Scholar]
- López-Alcarria, A.; Olivares-Vicente, A.; Poza-Vilches, F. A Systematic Review of the Use of Agile Methodologies in Education to Foster Sustainability Competencies. Sustainability 2019, 11, 2915. [Google Scholar] [CrossRef]
- Fronza, I.; Corral, L.; Pahl, C. End-User Software Development: Effectiveness of a Software Engineering-Centric Instructional Strategy. J. Inf. Technol. Educ. Res. 2020, 19, 367–393. [Google Scholar] [CrossRef]
- Bajpai, S.; Eppinger, S.D.; Joglekar, N.R. Enhancing Visibility in Agile Program Increment DSMs. In Proceedings of the 22nd International Dependency and Structure Modeling Conference, DSM 2020, Cambridge, MA, USA, 13–15 October 2020; pp. 155–164. [Google Scholar]
- Gerster, D.; Dremel, C.; Brenner, W.; Kelker, P. How Enterprises Adopt Agile Forms of Organizational Design. ACM SIGMIS Database Database Adv. Inf. Syst. 2020, 51, 84–103. [Google Scholar] [CrossRef]
- Jana, D.; Pal, P. ESSENCE Kernel in Overcoming Challenges of Agile Software Development. In Proceedings of the 2020 IEEE 17th India Council International Conference (INDICON), New Delhi, India, 10–13 December 2020; pp. 1–8. [Google Scholar]
- Mahajan, R.A.; Mahajan, S.A. Development of Scrum-Tree-KNN Algorithm for Distributed Agile Development. In Proceedings of the 2020 International Conference on Emerging Smart Computing and Informatics (ESCI), Pune, India, 12–14 March 2020; pp. 17–21. [Google Scholar]
- Almeida, F.; Simões, J. Leadership Challenges in Agile Environments. Int. J. Inf. Technol. Proj. Manag. 2021, 12, 30–44. [Google Scholar] [CrossRef]
- Khan, A.A.; Shameem, M.; Nadeem, M.; Akbar, M.A. Agile Trends in Chinese Global Software Development Industry: Fuzzy AHP Based Conceptual Mapping. Appl. Soft Comput. 2021, 102, 107090. [Google Scholar] [CrossRef]
- Russo, D. The Agile Success Model: A Mixed-Methods Study of a Large-Scale Agile Transformation. ACM Trans. Softw. Eng. Methodol. 2021, 30, 1–46. [Google Scholar] [CrossRef]
- Fitzgerald, B.; Stol, K.-J. Continuous Software Engineering and beyond: Trends and Challenges. In Proceedings of the 1st International Workshop on Rapid Continuous Software Engineering-RCoSE 2014, Hyderabad, India, 3 June 2014; ACM Press: New York, NY, USA, 2014; pp. 1–9. [Google Scholar]
- de Bayser, M.; Azevedo, L.G.; Cerqueira, R. ResearchOps: The Case for DevOps in Scientific Applications. In Proceedings of the 2015 IFIP/IEEE International Symposium on Integrated Network Management (IM), Ottawa, ON, Canada, 11–15 May 2015; pp. 1398–1404. [Google Scholar]
- Jabbari, R.; bin Ali, N.; Petersen, K.; Tanveer, B. What Is DevOps?: A Systematic Mapping Study on Definitions and Practices. In Proceedings of the Scientific Workshop Proceedings of XP2016, Edinburgh, UK, 24 May 2016; ACM: New York, NY, USA, 2016; Volume 24, pp. 1–11. [Google Scholar]
- Mohan, V.; Othmane, L. Ben SecDevOps: Is It a Marketing Buzzword?-Mapping Research on Security in DevOps. In Proceedings of the IEEE 2016 11th International Conference on Availability, Reliability and Security (ARES), Salzburg, Austria, 31 August–2 September 2016; pp. 542–547. [Google Scholar]
- Zheng, J.; Liu, Y.; Lin, J. Exploring and Enabling DevOps for Data Analytical System with Essential Demands Elicitation. Int. J. Softw. Eng. Knowl. Eng. 2016, 26, 1453–1472. [Google Scholar] [CrossRef]
- Rajkumar, M.; Pole, A.K.; Adige, V.S.; Mahanta, P. DevOps Culture and Its Impact on Cloud Delivery and Software Development. In Proceedings of the 2016 International Conference on Advances in Computing, Communication, & Automation (ICACCA), Dehradun, India, 8–9 April 2016; pp. 1–6. [Google Scholar]
- Airaj, M. Enable Cloud DevOps Approach for Industry and Higher Education. Concurr. Comput. 2017, 29, e3937. [Google Scholar] [CrossRef]
- Bucena, I.; Kirikova, M. Simplifying the Devops Adoption Process. In Proceedings of the CEUR Workshop Proceedings, Bangalore, India, 8–10 December 2017; Volume 1898. [Google Scholar]
- Huijgens, H.; Lamping, R.; Stevens, D.; Rothengatter, H.; Gousios, G.; Romano, D. Strong Agile Metrics: Mining Log Data to Determine Predictive Power of Software Metrics for Continuous Delivery Teams. In Proceedings of the 2017 11th Joint Meeting on Foundations of Software Engineering, Paderborn, Germany, 4–8 September 2017; ACM: New York, NY, USA, 2017; pp. 866–871. [Google Scholar]
- Fazal-Baqaie, M.; Güldali, B.; Oberthür, S. Towards DevOps in Multi-Provider Projects. In Proceedings of the CEUR Workshop Proceedings, Bangalore, India, 8–10 December 2017; Volume 1806, pp. 18–21. [Google Scholar]
- Díaz, J.; Almaraz, R.; Pérez, J.; Garbajosa, J. DevOps in Practice: An exploratory case study. In Proceedings of the 19th International Conference on Agile Software Development: Companion, Porto, Portugal, 21–25 May 2018; ACM: New York, NY, USA, 2018; pp. 1–3. [Google Scholar]
- Raibulet, C.; Arcelli Fontana, F. Collaborative and Teamwork Software Development in an Undergraduate Software Engineering Course. J. Syst. Softw. 2018, 144, 409–422. [Google Scholar] [CrossRef]
- Jabbari, R.; bin Ali, N.; Petersen, K.; Tanveer, B. Towards a Benefits Dependency Network for DevOps Based on a Systematic Literature Review. J. Softw. Evol. Process 2018, 30, e1957. [Google Scholar] [CrossRef]
- Stocker, W. From Agile to Continuous Development in the Healthcare Domain: Lessons Learned. In Proceedings of the International Conference on Software Engineering, Beijing, China, 23–25 November 2018; pp. 211–212. [Google Scholar]
- Silva, M.A.; Faustino, J.P.; Pereira, R.; da Silva, M.M. Productivity Gains of DevOps Adoption in an IT Team: A Case Study. In Proceedings of the 27th International Conference on Information Systems Development: Designing Digitalization, ISD 2018, Lund, Sweden, 22–24 August 2018. [Google Scholar]
- Elberzhager, F.; Naab, M. High Quality at Short Time-to-Market: Challenges Towards This Goal and Guidelines for the Realization. In Software Quality: Methods and Tools for Better Software and Systems—10th International Conference, SWQD 2018, Vienna, Austria, 16–19 January 2018, Proceedings; Lecture Notes in Business Information Processing; Springer: Cham, Switzerland, 2018; Volume 302, pp. 121–132. [Google Scholar]
- Martinez-Fernandez, S.; Vollmer, A.M.; Jedlitschka, A.; Franch, X.; Lopez, L.; Ram, P.; Rodriguez, P.; Aaramaa, S.; Bagnato, A.; Choras, M.; et al. Continuously Assessing and Improving Software Quality With Software Analytics Tools: A Case Study. IEEE Access 2019, 7, 68219–68239. [Google Scholar] [CrossRef]
- Luz, W.P.; Pinto, G.; Bonifácio, R. Adopting DevOps in the Real World: A Theory, a Model, and a Case Study. J. Syst. Softw. 2019, 157, 110384. [Google Scholar] [CrossRef]
- Zulfahmi Toh, M.; Sahibuddin, S.; Mahrin, M.N. Adoption Issues in DevOps from the Perspective of Continuous Delivery Pipeline. In Proceedings of the PervasiveHealth: Pervasive Computing Technologies for Healthcare, Trento, Italy, 20–23 May 2019; Volume F1479, pp. 173–177. [Google Scholar]
- Siewruk, G.; Mazurczyk, W.; Karpiński, A. Security Assurance in Devops Methodologies and Related Environments. Int. J. Electron. Telecommun. 2019, 65, 211–216. [Google Scholar] [CrossRef]
- Badshah, S.; Khan, A.A.; Khan, B. Towards Process Improvement in DevOps: A Systematic Literature Review. In Proceedings of the PervasiveHealth: Pervasive Computing Technologies for Healthcare, Atlanta, GA, USA, 18–20 May 2020; pp. 427–433. [Google Scholar]
- Khan, A.A.; Shameem, M. Multicriteria Decision-making Taxonomy for DevOps Challenging Factors Using Analytical Hierarchy Process. J. Softw. Evol. Process 2020, 32, e2263. [Google Scholar] [CrossRef]
- Macarthy, R.W.; Bass, J.M. An Empirical Taxonomy of DevOps in Practice. In Proceedings of the 46th Euromicro Conference on Software Engineering and Advanced Applications, SEAA 2020, Portoroz, Slovenia, 26–28 August 2020; pp. 221–228. [Google Scholar]
- Rafi, S.; Yu, W.; Akbar, M.A. Towards a Hypothetical Framework to Secure DevOps Adoption: Grounded Theory Approach. In Proceedings of the 24th International Conference on Evaluation and Assessment in Software Engineering, Trondheim, Norway, 15–17 April 2020; ACM: New York, NY, USA, 2020; pp. 457–462. [Google Scholar]
- Rafi, S.; Yu, W.; Akbar, M.A.; Alsanad, A.; Gumaei, A. Prioritization Based Taxonomy of DevOps Security Challenges Using PROMETHEE. IEEE Access 2020, 8, 105426–105446. [Google Scholar] [CrossRef]
- Wang, Y.; Mäntylä, M.V.; Demeyer, S.; Wiklund, K.; Eldh, S.; Kairi, T. Software Test Automation Maturity: A Survey of the State of the Practice. In Proceedings of the ICSOFT 2020-Proceedings of the 15th International Conference on Software Technologies, Online, 7–9 July 2020; pp. 27–38. [Google Scholar]
- Zaydi, M.; Nassereddine, B. DevSecOps Practices for an Agile and Secure IT Service Management. J. Manag. Inf. Decis. Sci. 2020, 23, 134–149. [Google Scholar]
- Raj, P.; Sinha, P. Project Management in Era of Agile and Devops Methodlogies. Int. J. Sci. Technol. Res. 2020, 9, 1024–1033. [Google Scholar]
- Sliep, C.; Marnewick, C. The Quest in Delivering Quality IT Services: The Case of a Higher Education Institution. Educ. Inf. Technol. 2020, 25, 4817–4844. [Google Scholar] [CrossRef]
- Leite, L.; Pinto, G.; Kon, F.; Meirelles, P. The Organization of Software Teams in the Quest for Continuous Delivery: A Grounded Theory Approach. Inf. Softw. Technol. 2021, 139, 106672. [Google Scholar] [CrossRef]
- Rafi, S.; Yu, W.; Akbar, M.A.; Mahmood, S.; Alsanad, A.; Gumaei, A. Readiness Model for DevOps Implementation in Software Organizations. J. Softw. Evol. Process 2021, 33, e2323. [Google Scholar] [CrossRef]
- Mahdavi-Hezaveh, R.; Dremann, J.; Williams, L. Software Development with Feature Toggles: Practices Used by Practitioners. Empir. Softw. Eng. 2021, 26, 1. [Google Scholar] [CrossRef]
- Toh, M.Z.; Sahibuddin, S.; Bakar, R.A. A Review on DevOps Adoption in Continuous Delivery Process. In Proceedings of the 2021 International Conference on Software Engineering & Computer Systems and 4th International Conference on Computational Science and Information Management (ICSECS-ICOCSIM), Pekan, Malaysia, 24–26 August 2021; pp. 98–103. [Google Scholar]
- Rajapakse, R.N.; Zahedi, M.; Babar, M.A.; Shen, H. Challenges and Solutions When Adopting DevSecOps: A Systematic Review. Inf. Softw Technol. 2022, 141, 106700. [Google Scholar] [CrossRef]
- Nisha, T.N.; Khandebharad, A. Migration From DevOps to DevSecOps: A Complete Migration Framework, Challenges, and Evaluation. Int. J. Cloud Appl. Comput. (IJCAC) 2021, 12, 1–15. [Google Scholar] [CrossRef]
- Akbar, M.A.; Rafi, S.; Alsanad, A.A.; Qadri, S.F.; Alsanad, A.; Alothaim, A. Toward Successful DevOps: A Decision-Making Framework. IEEE Access 2022, 10, 51343–51362. [Google Scholar] [CrossRef]
- Jayakody, J.A.V.M.K.; Wijayanayake, W.M.J.I. Critical Success Factors for DevOps Adoption in Information Systems Development. Int. J. Inf. Syst. Proj. Manag. 2023, 11, 60–82. [Google Scholar] [CrossRef]
- Kumar, R.; Goyal, R. Modeling Continuous Security: A Conceptual Model for Automated DevSecOps Using Open-Source Software over Cloud (ADOC). Comput. Secur. 2020, 97, 101967. [Google Scholar] [CrossRef]
- Baškarada, S.; Nguyen, V.; Koronios, A. Architecting Microservices: Practical Opportunities and Challenges. J. Comput. Inf. Syst. 2020, 60, 428–436. [Google Scholar] [CrossRef]
- Ntentos, E.; Zdun, U.; Plakidas, K.; Meixner, S.; Geiger, S. Metrics for Assessing Architecture Conformance to Microservice Architecture Patterns and Practices. In Service-Oriented Computing: 18th International Conference, ICSOC 2020, Dubai, United Arab Emirates, 14–17 December 2020, Proceedings; Lecture Notes in Computer Science (Including Subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Springer: Cham, Switzerland, 2020; Volume 12571, pp. 580–596. [Google Scholar]
- Daneva, M.; Bolscher, R. What We Know About Software Architecture Styles in Continuous Delivery and Devops? In Software Technologies: 14th International Conference, ICSOFT 2019, Prague, Czech Republic, 26–28 July 2019, Revised Selected Papers; Communications in Computer and Information Science Series; Springer: Cham, Switzerland, 2020; Volume 1250, ISBN 9783030529901. [Google Scholar]
- Henkel, J.; Bird, C.; Lahiri, S.K.; Reps, T. Learning from, Understanding, and Supporting Devops Artifacts for Docker. In Proceedings of the Proceedings-International Conference on Software Engineering, Limerick, Ireland, 9 June 2020; pp. 38–49. [Google Scholar]
- Hills, M. Introducing DevOps Techniques in a Software Construction Class. In Proceedings of the 2020 IEEE 32nd Conference on Software Engineering Education and Training, CSEE and T 2020, Munich, Germany, 9–12 November 2020; pp. 85–89. [Google Scholar]
- Hemon, A.; Fitzgerald, B.; Lyonnet, B.; Rowe, F. Innovative Practices for Knowledge Sharing in Large-Scale DevOps. IEEE Softw. 2020, 37, 30–37. [Google Scholar] [CrossRef]
- Leite, L.; Kon, F.; Pinto, G.; Meirelles, P. Platform Teams: An Organizational Structure for Continuous Delivery. In Proceedings of the 2020 IEEE/ACM 42nd International Conference on Software Engineering Workshops, ICSEW 2020, Seoul, Republic of Korea, 27 June–19 July 2020; pp. 505–511. [Google Scholar]
- Rangnau, T.; Buijtenen, R.V.; Fransen, F.; Turkmen, F. Continuous Security Testing: A Case Study on Integrating Dynamic Security Testing Tools in CI/CD Pipelines. In Proceedings of the 2020 IEEE 24th International Enterprise Distributed Object Computing Conference, EDOC 2020, Eindhoven, The Netherlands, 5–8 October 2020; pp. 145–154. [Google Scholar]
- João, N.A.; Faustino, O.; Pereira, R.; Alturas, B.; Silva, M.M. da Agile Information Technology Service Management with DevOps: An Incident Management Case Study. Int. J. Agil. Syst. Manag. 2020, 13, 339. [Google Scholar] [CrossRef]
- Lim, G.; Ham, M.; Moon, J.; Song, W. LightSys: Lightweight and Efficient CI System for Improving Integration Speed of Software. In Proceedings of the International Conference on Software Engineering, Limerick, Ireland, 9 June 2021; pp. 91–100. [Google Scholar]
- Muñoz, A.; Farao, A.; Correia, J.R.C.; Xenakis, C. P2ise: Preserving Project Integrity in Ci/Cd Based on Secure Elements. Information 2021, 12, 357. [Google Scholar] [CrossRef]
- Railic, N.; Savic, M. Architecting Continuous Integration and Continuous Deployment for Microservice Architecture. In Proceedings of the 2021 20th International Symposium INFOTEH-JAHORINA, INFOTEH 2021-Proceedings, Jahorina, Republic of Srpska, Bosnia and Herzegovina, 17–19 March 2021. [Google Scholar]
- Castellanos, C.; Varela, C.A.; Correal, D. ACCORDANT: A Domain Specific-Model and DevOps Approach for Big Data Analytics Architectures. J. Syst. Softw. 2021, 172, 110869. [Google Scholar] [CrossRef]
- Rodriguez, M.; de Araújo, L.J.P.; Mazzara, M. Good Practices for the Adoption of DataOps in the Software Industry. J. Phys. Conf. Ser. 2020, 1694, 012032. [Google Scholar] [CrossRef]
- Batra, P.; Jatain, A. Hybrid Model for Evaluation of Quality Aware DevOps. Int. J. Appl. Sci. Eng. 2021, 18, 1–11. [Google Scholar] [CrossRef]
- Tomas, N.; Li, J.; Huang, H. An Empirical Study on Culture, Automation, Measurement, and Sharing of DevSecOps. In Proceedings of the 2019 International Conference on Cyber Security and Protection of Digital Services (Cyber Security), Oxford, UK, 3–4 June 2019; pp. 1–8. [Google Scholar]
- Alnaim, A.A. Using Rules Engine in the Automation of System Security Review. In Proceedings of the 2019 IEEE Cybersecurity Development (SecDev), IEEE, McLean, VA, USA, 25–27 September 2019; p. 142. [Google Scholar]
- Meixner, K.; Winkler, D.; Biffl, S. Towards Combined Process & Tool Variability Management in Software Testing. In Proceedings of the 13th International Workshop on Variability Modelling of Software-Intensive Systems, Leuven, Belgium, 6–8 February 2019; ACM: New York, NY, USA, 2019; pp. 1–6. [Google Scholar]
- Boehm, B.; Behnamghader, P. Anticipatory Development Processes for Reducing Total Ownership Costs and Schedules. Syst. Eng. 2019, 22, 401–410. [Google Scholar] [CrossRef]
- Bolscher, R.; Daneva, M. Designing Software Architecture to Support Continuous Delivery and DevOps: A Systematic Literature Review. In Proceedings of the 14th International Conference on Software Technologies, SCITEPRESS-Science and Technology Publications, Prague, Czech Republic, 2–4 May 2019; pp. 27–39. [Google Scholar]
- Oliinyk, B.; Oleksiuk, V. Automation in Software Testing, Can We Automate Anything We Want? In Proceedings of the CEUR Workshop Proceedings, Kryvyi Rih, Ukraine, 20 December 2019; Volume 2546, pp. 224–234. [Google Scholar]
- Jennings, R.A.K.; Gannod, G. DevOps-Preparing Students for Professional Practice. In Proceedings of the Frontiers in Education Conference, FIE, Lincoln, NE, USA, 13–16 October 2019. [Google Scholar]
- Guseila, L.G.; Bratu, D.-V.; Moraru, S.-A. Continuous Testing in the Development of IoT Applications. In Proceedings of the 2019 International Conference on Sensing and Instrumentation in IoT Era (ISSI), Lisbon, Portugal, 29–30 August 2019; pp. 1–6. [Google Scholar]
- Ferry, N.; Solberg, A.; Song, H.; Lavirotte, S.; Tigli, J.-Y.; Winter, T.; Muntés-Mulero, V.; Metzger, A.; Rios Velasco, E.; Castelruiz Aguirre, A. ENACT: Development, Operation, and Quality Assurance of Trustworthy Smart IoT Systems. In Software Engineering Aspects of Continuous Development and New Paradigms of Software Production and Deployment: First International Workshop, DEVOPS 2018, Chateau de Villebrumier, France, 5–6 March 2018, Revised Selected Papers; Lecture Notes in Computer Science (Including Subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Springer: Cham, Switzerland, 2019; Volume 11350, pp. 112–127. [Google Scholar]
- Rahman, A.; Agrawal, A.; Krishna, R.; Sobran, A. Characterizing the Influence of Continuous Integration: Empirical Results from 250+ Open Source and Proprietary Projects. In Proceedings of the 4th ACM SIGSOFT International Workshop on Software Analytics, Lake Buena Vista, FL, USA, 5 November 2018; ACM: New York, NY, USA, 2018; pp. 8–14. [Google Scholar]
- Ivanov, V.; Smolander, K. Implementation of a DevOps Pipeline for Serverless Applications. In Product-Focused Software Process Improvement: 19th International Conference, PROFES 2018, Wolfsburg, Germany, 28–30 November 2018, Proceedings; Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Springer: Cham, Switzerland, 2018; Volume 11271, pp. 48–64. ISBN 9783030036720. [Google Scholar]
- Erder, M.; Pureur, P. Continuous Architecture: Sustainable Architecture in an Agile and Cloud-Centric World; Morgan Kaufmann: Waltham, MA, USA, 2015; ISBN 9780128032848. [Google Scholar]
- Di Nitto, E.; Jamshidi, P.; Guerriero, M.; Spais, I.; Tamburri, D.A. A Software Architecture Framework for Quality-Aware DevOps. In Proceedings of the 2nd International Workshop on Quality-Aware DevOps, Saarbrücken, Germany, 21 July 2016; ACM: New York, NY, USA, 2016; pp. 12–17. [Google Scholar]
- Adams, B.; McIntosh, S. Modern Release Engineering in a Nutshell–Why Researchers Should Care. In Proceedings of the 2016 IEEE 23rd International Conference on Software Analysis, Evolution, and Reengineering (SANER), Osaka, Japan, 14–18 March 2016; pp. 78–90. [Google Scholar]
- Perez-Palacin, D.; Ridene, Y.; Merseguer, J. Quality Assessment in DevOps: Automated Analysis of a Tax Fraud Detection System. In Proceedings of the 8th ACM/SPEC on International Conference on Performance Engineering Companion, L’Aquila, Italy, 22–26 April 2017; ACM: New York, NY, USA, 2017; pp. 133–138. [Google Scholar]
- Zhao, Y.; Serebrenik, A.; Zhou, Y.; Filkov, V.; Vasilescu, B. The Impact of Continuous Integration on Other Software Development Practices: A Large-Scale Empirical Study. In Proceedings of the 2017 32nd IEEE/ACM International Conference on Automated Software Engineering (ASE), Urbana, IL, USA, 30 October–3 November 2017; pp. 60–71. [Google Scholar]
- Lenhard, J. Improving Process Portability Through Metrics and Continuous Inspection. In Advances in Intelligent Process-Aware Information Systems: Concepts, Methods, and Technologies; Intelligent Systems Reference Library Series; Springer: Cham, Switzerland, 2017; Volume 123, pp. 193–223. [Google Scholar]
- Fitzgerald, B.; Stol, K.-J. Continuous Software Engineering: A Roadmap and Agenda. J. Syst. Softw. 2017, 123, 176–189. [Google Scholar] [CrossRef]
- Spinellis, D. State-of-the-Art Software Testing. IEEE Softw. 2017, 34, 4–6. [Google Scholar] [CrossRef]
- Meng, F.J.; Wegman, M.N.; Xu, J.M.; Zhang, X.; Chen, P.; Chafle, G. IT Troubleshooting with Drift Analysis in the DevOps Era. IBM J. Res. Dev. 2017, 61, 6:62–6:73. [Google Scholar] [CrossRef]
- Qumer Gill, A.; Loumish, A.; Riyat, I.; Han, S. DevOps for Information Management Systems. VINE J. Inf. Knowl. Manag. Syst. 2018, 48, 122–139. [Google Scholar] [CrossRef]
- Mascheroni, M.A.; Irrazábal, E. Continuous Testing and Solutions for Testing Problems in Continuous Delivery: A Systematic Literature Review. Comput. Y Sist. 2018, 22, 1009–1038. [Google Scholar] [CrossRef]
- Mohan, V.; ben Othmane, L.; Kres, A. BP: Security Concerns and Best Practices for Automation of Software Deployment Processes: An Industrial Case Study. In Proceedings of the 2018 IEEE Cybersecurity Development (SecDev), Cambridge, MA, USA, 30 September–2 October 2018; pp. 21–28. [Google Scholar]
- Luz, W.P.; Pinto, G.; Bonifácio, R. Building a Collaborative Culture: A grounded theory of well succeeded devops adoption in practice. In Proceedings of the 12th ACM/IEEE International Symposium on Empirical Software Engineering and Measurement, Oulu, Finland, 11–12 October 2018; ACM: New York, NY, USA, 2018; pp. 1–10. [Google Scholar]
- Steffens, A.; Lichter, H.; Moscher, M. Towards Data-Driven Continuous Compliance Testing. In Proceedings of the CEUR Workshop Proceedings, Copenhagen, Denmark, 14 October 2018; Volume 2066, pp. 78–84. [Google Scholar]
- Cruzes, D.S.; Melsnes, K.; Marczak, S. Testing in a DevOps Era: Perceptions of Testers in Norwegian Organisations. In Computational Science and Its Applications—ICCSA 2019: 19th International Conference, Saint Petersburg, Russia, 1–4 July 2019, Proceedings, Part IV; Lecture Notes in Computer Science (Including Subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Springer: Cham, Switzerland, 2019; Volume 11622, pp. 442–455. [Google Scholar]
- Mumbarkar, P.; Prasad, S. Adopting DevOps: Capabilities, Practices, and Challenges Faced by Organizations. AIP Conf. Proc. 2022, 2519, 030029. [Google Scholar] [CrossRef]
- Rafi, S.; Akbar, M.A.; Mahmood, S.; Alsanad, A.; Alothaim, A. Selection of DevOps Best Test Practices: A Hybrid Approach Using ISM and Fuzzy TOPSIS Analysis. J. Softw. Evol. Process 2022, 34, e2448. [Google Scholar] [CrossRef]
- Bonet Faus, J.; Le Masson, P.; Pelissier, U.; Jibet, N.; Bordas, A.; Pajot, S. Design Methods for Diagnosing and Locating Entangled Technical Debt in Devops Frameworks. Proc. Des. Soc. 2023, 3, 1267–1276. [Google Scholar] [CrossRef]
- Hernández, R.; Moros, B.; Nicolás, J. Requirements Management in DevOps Environments: A Multivocal Mapping Study. Requir. Eng. 2023, 28, 317–346. [Google Scholar] [CrossRef]
- Kumar, A.; Nadeem, M.; Shameem, M. Machine Learning Based Predictive Modeling to Effectively Implement DevOps Practices in Software Organizations. Autom. Softw. Eng. 2023, 30, 21. [Google Scholar] [CrossRef]
- Pandiyavathi, T.; Sivakumar, B. DevOps Challenges and Practices in Software Engineering. In Intelligent Sustainable Systems: Proceedings of ICISS 2023; Lecture Notes in Networks and Systems; Springer: Singapore, 2023; Volume 665, pp. 49–57. [Google Scholar] [CrossRef]
- Sravani, D.; Reddy, J.R.; Viswas, P.S.; Jyothi, N.M.; Chandukiran, P. Python Security in DevOps: Best Practices for Secure Coding, Configuration Management, and Continuous Testing and Monitoring. In Proceedings of the 2023 4th International Conference on Electronics and Sustainable Communication Systems, ICESC 2023–Proceedings, Coimbatore, India, 6–8 July 2023; pp. 514–520. [Google Scholar] [CrossRef]
- Rani, V.S.; Babu, A.R.; Deepthi, K.; Reddy, V.R. Shift-Left Testing in DevOps: A Study of Benefits, Challenges, and Best Practices. In Proceedings of the 2nd International Conference on Automation, Computing and Renewable Systems, ICACRS 2023–Proceedings, Pudukkottai, India, 11–13 December 2023; pp. 1675–1680. [Google Scholar] [CrossRef]
- Narasimhulu, M.; Mounika, D.V.; Varshini, P.; Amarendra, K.; Rao, T.K.R.K. Investigating the Impact of Containerization on the Deployment Process in DevOps. In the Proceedings of the 2nd International Conference on Edge Computing and Applications, ICECAA, Namakkal, India, 19–21 July 2023; pp. 679–685. [Google Scholar] [CrossRef]
- Hemon, A.; Lyonnet, B.; Rowe, F.; Fitzgerald, B. From Agile to DevOps: Smart Skills and Collaborations. Inf. Syst. Front. 2020. [Google Scholar] [CrossRef]
- Hemon, A.; Lyonnet, B.; Rowe, F.; Fitzgerald, B. Conceptualizing the Transition from Agile to DevOps: A Maturity Model for a Smarter Is Function. In Proceedings of the IFIP Advances in Information and Communication Technology, Lisbon, Portugal, 25–27 June 2019. [Google Scholar]
- Saltz, J.; Sutherland, A. Ski: A New Agile Framework That Supports Devops, Continuous Delivery, and Lean Hypothesis Testing. In Proceedings of the Annual Hawaii International Conference on System Sciences, Maui, HI, USA, 7–10 January 2020; pp. 6217–6226. [Google Scholar]
Database | Found | Include | Exclude |
---|---|---|---|
Scopus | 374 | 108 | 266 |
Web of Science | 2 | 1 | 1 |
Snowballing | 2 | 2 | 0 |
Total | 378 | 111 | 267 |
Research Question | Results |
---|---|
RQ1 | [5,7,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30] |
RQ2 | [31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118] |
RQ3 | [68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118] |
RQ4 | [119,120,121] |
Practice/Reference | [5] | [11] | [13] | [14] | [15] | [16] | [17] | [18] | [19] | [20] | [21] | [22] | [23] | [24] | [25] | [26] | [27] | [28] | [12] | [29] | [30] |
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Support from management | X | ||||||||||||||||||||
Deliver continuous information | X | X | X | X | |||||||||||||||||
Constant quality measurement (concurrent testing) | X | X | X | X | X | X | X | X | |||||||||||||
Actively involve the stakeholders | X | X | X | X | X | X | X | X | X | X | X | X | X | ||||||||
Transparent communication channels | X | X | X | X | X | X | X | X | X | X | X | ||||||||||
The organizational culture | X | X | |||||||||||||||||||
Incremental, iterative development | X | X | X | X | X | X | |||||||||||||||
Early and continuous feedback | X | X | X | X | X | X | X | X | X | X | X | X | X | ||||||||
Continuous improvement | X | X | X | X | |||||||||||||||||
Shorter delivery cycles | X | X | X | X | X | ||||||||||||||||
Decomposition of the work on smaller lists prioritized by the business value they deliver | X | X | X | X | |||||||||||||||||
Delivery of commitments in time periods no longer than the duration of a sprint | X | X | X | ||||||||||||||||||
Collaborative work | X | X | X | ||||||||||||||||||
Quality deliverables | X | X | X | X | X | X | X | X | |||||||||||||
Self-management | X | X |
Practice/Reference | [68] | [69] | [70] | [71] | [72] | [73] | [74] | [75] | [76] | [77] | [78] | [79] | [80] | [81] | [82] | [83] | [84] | [85] | [86] |
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Versioning | X | X | X | X | X | X | X | X | X | X | X | X | X | ||||||
CI | X | X | X | X | X | X | X | X | X | X | X | X | X | ||||||
CD | X | X | X | X | X | X | X | X | X | X | X | X | X | ||||||
Microservices | X | X | X | ||||||||||||||||
Cloud computing | X | X | X | X | X | X | X | X | X | X | X | X | X | X | |||||
SCA | X | X | X | ||||||||||||||||
IaC | X | X | X | X | X | X | X | X | X | X | X | ||||||||
DataOps | X | X | |||||||||||||||||
Continuous improvement | X | X | X | ||||||||||||||||
Involving security | X | X | |||||||||||||||||
TDD | X | ||||||||||||||||||
BDD | X | ||||||||||||||||||
Unit testing | X | ||||||||||||||||||
Integration testing | X | ||||||||||||||||||
Automated testing | X |
Practice/Reference | [87] | [88] | [89] | [90] | [91] | [92] | [93] | [94] | [95] | [96] | [97] | [99] | [100] | [101] | [102] | [103] | [104] | [105] | [106] |
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Versioning | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | ||
CI | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | ||
CD | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | ||||
Microservices | |||||||||||||||||||
Cloud comp. | X | ||||||||||||||||||
SCA | X | X | X | X | X | X | X | ||||||||||||
IaC | X | X | X | X | |||||||||||||||
DataOps | |||||||||||||||||||
Cont. imp. | X | X | X | X | X | X | X | ||||||||||||
Involving security | X | X | X | X | |||||||||||||||
TDD | X | X | |||||||||||||||||
BDD | |||||||||||||||||||
Unit testing | X | X | X | X | X | X | X | X | X | X | X | ||||||||
Integration testing | X | X | X | X | X | X | X | X | X | ||||||||||
Automated testing | X | X | X | X | X | X | X | X | X | X | |||||||||
Cont. monitoring | X | X | X | X | X | X | X | X | X | ||||||||||
Dependency mgt. | X | X | |||||||||||||||||
Continuous planning | X | X | |||||||||||||||||
Code standard | X | ||||||||||||||||||
Collaborative culture | X | X | |||||||||||||||||
Cont. BM. | X | ||||||||||||||||||
Continuous delivery | X | ||||||||||||||||||
Continuous info. | X | X | |||||||||||||||||
Continuous feedback | X | X | X | X |
Practice/Reference | [107] | [108] | [109] | [110] | [111] | [112] | [113] | [114] | [115] | [116] | [117] | [118] |
---|---|---|---|---|---|---|---|---|---|---|---|---|
Versioning | X | X | X | X | X | X | X | |||||
CI | X | X | X | X | X | X | ||||||
CD | X | X | X | X | X | X | ||||||
Microservices | ||||||||||||
Cloud computing | X | |||||||||||
SCA | X | X | X | X | ||||||||
IaC | X | |||||||||||
DataOps | ||||||||||||
Continuous improvement | X | X | X | X | X | X | ||||||
Involving security | ||||||||||||
TDD | X | |||||||||||
BDD | ||||||||||||
Unit testing | X | X | X | X | X | X | ||||||
Integration testing | X | X | ||||||||||
Automated testing | X | X | X | X | X | X | ||||||
Continuous monitoring | X | X | X | X | X | X | ||||||
Dependency management | ||||||||||||
Continuous planning | X | |||||||||||
Code standard | ||||||||||||
Collaborative culture | X | X | X | X | ||||||||
Continuous benchmarking | ||||||||||||
Continuous delivery | X | |||||||||||
Continuous information | X | X | X | |||||||||
Continuous feedback | X | X | X | X | X |
Challenges | Scrum Practices | DevOps Practices |
---|---|---|
Cultural challenges | Actively involved stakeholders Transparent communication channels | Creation of a collaborative culture Continuous improvement |
Technical limitations | Constant quality measurement or concurrent testing Early and continuous feedback | Versioning Automation of pipeline operations Cloud computing IaC |
Process-related challenges | Early and continuous feedback Delivering high-quality outputs | Continuous improvement Continuous integration Continuous deployment Automated testing Unit testing |
Resource challenges | Transparent communication channels | Cloud computing Continuous integration Continuous deployment |
Benefits | Improvement Observed | Supporting Studies |
---|---|---|
Scrum adoption | Actively involved stakeholders. Transparent communication channels. Increased team collaboration and improved predictability. Creation of a collaborative culture. Continuous improvement. | [4] |
DevOps adoption | Constant quality measurement or concurrent testing. Early and continuous feedback. Productivity increased by 20%, and deployment time decreased by 30%. | [45] |
Faster release cycles | Time to market decreased by 25%, and incident resolution time decreased by 40%. Quality deliverable. | [29,48] |
Continuous integration | Early and continuous feedback. Quality deliverable. Time to market decreased by 25%, and incident resolution time decreased by 40%. | [40,93,99] |
Automated testing | Transparent communication channels. Test execution speed increased by 35%, and defect detection increased by 18%. | [111] |
Shift-left testing | Early defect detection increased by 40%, and bug-fix costs increased by 25%. | [117] |
Security automation | Security vulnerabilities decreased by 30%, and response time decreased by 50%. | [106] |
Agile transformation | The development cycle decreased by 25%, and project success rates increased by 18%. | [20,30] |
Disclaimer/Publisher’s Note: The statements, opinions and data contained in all publications are solely those of the individual author(s) and contributor(s) and not of MDPI and/or the editor(s). MDPI and/or the editor(s) disclaim responsibility for any injury to people or property resulting from any ideas, methods, instructions or products referred to in the content. |
© 2025 by the authors. Licensee MDPI, Basel, Switzerland. This article is an open access article distributed under the terms and conditions of the Creative Commons Attribution (CC BY) license (https://creativecommons.org/licenses/by/4.0/).
Share and Cite
Pastrana, M.; Ordoñez, H.; Cobos-Lozada, C.A.; Muñoz, M. Best Practices Evidenced for Software Development Based on DevOps and Scrum: A Literature Review. Appl. Sci. 2025, 15, 5421. https://doi.org/10.3390/app15105421
Pastrana M, Ordoñez H, Cobos-Lozada CA, Muñoz M. Best Practices Evidenced for Software Development Based on DevOps and Scrum: A Literature Review. Applied Sciences. 2025; 15(10):5421. https://doi.org/10.3390/app15105421
Chicago/Turabian StylePastrana, Manuel, Hugo Ordoñez, Carlos Alberto Cobos-Lozada, and Mirna Muñoz. 2025. "Best Practices Evidenced for Software Development Based on DevOps and Scrum: A Literature Review" Applied Sciences 15, no. 10: 5421. https://doi.org/10.3390/app15105421
APA StylePastrana, M., Ordoñez, H., Cobos-Lozada, C. A., & Muñoz, M. (2025). Best Practices Evidenced for Software Development Based on DevOps and Scrum: A Literature Review. Applied Sciences, 15(10), 5421. https://doi.org/10.3390/app15105421