Implementasi Alur Pipeline Development Security dan Operations (DevSecOps) pada Aplikasi Backend di Bursa Efek Indonesia

Stevanza, Gian Maheswara (2025) Implementasi Alur Pipeline Development Security dan Operations (DevSecOps) pada Aplikasi Backend di Bursa Efek Indonesia. Project Report. [s.n.], [s.l.]. (Unpublished)

[thumbnail of 5025221248-Project_Report.pdf] Text
5025221248-Project_Report.pdf - Accepted Version
Restricted to Repository staff only

Download (1MB) | Request a copy

Abstract

PT Bursa Efek Indonesia merupakan lembaga yang berperan sebagai pusat infrastruktur pasar modal nasional, sehingga memerlukan sistem teknologi informasi yang aman, andal, serta mengikuti standar industri modern. Selama pelaksanaan Kerja Praktik, proyek utama yang dikerjakan adalah implementasi alur pipeline DevSecOps pada sebuah aplikasi backend sederhana yang bertujuan untuk meningkatkan efisiensi, keamanan, dan otomatisasi proses pengembangan perangkat lunak di lingkungan internal perusahaan.Aplikasi backend dibangun menggunakan Node.js dengan database MongoDB, dan pipeline DevSecOps yang diterapkan memanfaatkan beberapa tools utama, yaitu Bitbucket sebagai penyimpanan kode, Jenkins sebagai automation server, SonarQube untuk quality gate dan analisis keamanan kode, Nexus sebagai repository artifak, serta Docker dan Kubernetes untuk proses kontainerisasi dan orkestrasi aplikasi. Mahasiswa juga terlibat dalam proyek IDXCatalyst yang berfokus pada pemrosesan dan masking data konfidensial sebagai bagian dari persiapan data pelatihan model AI berbasis LLM. Seluruh implementasi pipeline dirancang agar proses build, test, analisis kualitas, pembuatan image Docker dapat berjalan secara otomatis dan terintegrasi. Hasil akhir menunjukkan bahwa pipeline DevSecOps berfungsi dengan baik serta menghasilkan dokumentasi dan konfigurasi yang dapat digunakan sebagai blueprint bagi pemagang selanjutnya di Unit Pengembangan Aplikasi.
===================================================================================================================================
The Indonesia Stock Exchange (IDX) serves as the national capital market infrastructure center, requiring a secure, reliable information technology system that adheres to modern industry standards. During the internship, the main project was the implementation of a DevSecOps pipeline on a simple backend application, aimed at improving the efficiency, security, and automation of the software development process within the company's internal environment. The backend application was built using Node.js with a MongoDB database. The implemented DevSecOps pipeline utilized several key tools: Bitbucket as the code repository, Jenkins as the automation server, SonarQube for quality gates and code security analysis, Nexus as the artifact repository, and Docker and Kubernetes for containerization and application orchestration. Students were also involved in the IDXCatalyst project, which focused on processing and masking confidential data as part of the training data preparation for an LLM-based AI model. The entire pipeline implementation was designed to automate and integrate the build, test, quality analysis, and Docker image creation processes. The final results show that the DevSecOps pipeline is functioning well and produces documentation and configurations that can be used as a blueprint for future interns in the Application Development Uni

Item Type: Monograph (Project Report)
Uncontrolled Keywords: DevSecOps, CI/CD, Jenkins, Docker, SonarQube, Nexus, Kubernetes, Backend
Subjects: T Technology > T Technology (General) > T58.5 Information technology. IT--Auditing
T Technology > T Technology (General) > T58.6 Management information systems
T Technology > TK Electrical engineering. Electronics Nuclear engineering > TK105.8883 Web authoring software (include web server)
T Technology > TK Electrical engineering. Electronics Nuclear engineering > TK3070 Automatic control
T Technology > TK Electrical engineering. Electronics Nuclear engineering > TK7888.3 Digital computers
Divisions: Faculty of Industrial Technology > Informatics Engineering > 55201-(S1) Undergraduate Thesis
Depositing User: Stevanza Gian Maheswara
Date Deposited: 08 Dec 2025 04:42
Last Modified: 08 Dec 2025 04:42
URI: http://repository.its.ac.id/id/eprint/128878

Actions (login required)

View Item View Item