TrustOps: Continuously Building Trustworthy Software

As automation continues to permeate critical domains of society, ensuring transparency and verifiability of automated actions becomes imperative for achieving trustworthy software, especially given the rapid and distributed nature of modern development, potentiating incidents like recent global supply chain attacks. Gathering verifiable or attestable evidence during software development and operations is needed for establishing and automating trust. Therefore, we advocate for TrustOps, an evidence-driven extension of DevOps, as a new paradigm for enhancing trust in software systems.In this presentation, we explore different TrustOps application scenarios, exploiting the new trends in trust-enhancing technologies. We share ideas on how to leverage Trusted Execution Environments to establish trustworthy CI/CD processes, or doing privacy preserving Continuous SLA Monitoring with Zero-Knowledge Proof protocols.