Continuous Quality Monitoring Framework for DevSecOps Software Delivery Pipelines

Abstract

DevSecOps pipelines require continuous quality monitoring because code changes, test failures, security findings, dependency risks, and deployment problems can appear at different delivery stages. This study presents a continuous quality monitoring framework that combines code-quality change, automated test stability, security-risk findings, dependency health, and deployment reliability. The framework collects evidence from source control, build systems, testing tools, security scanners, dependency managers, and deployment monitors. It converts this evidence into continuous quality and normalized security-risk scores and supports automated pipeline actions. The framework was evaluated across source commit, build, automated test, security scan, staging deployment, and production release stages. Results showed that the proposed approach detected quality decline and security risk earlier than fixed quality gates and periodic manual review. It also confirmed recovery before release after corrective actions. The framework can reduce feedback delay, prevent risky deployments, improve collaboration, and support reliable DevSecOps software delivery in complex enterprise environments.