Components:

• Kanban board

• Work-in-Progress (WIP) limits

• Kanban cards or tickets

Concepts:

• Visualizing the workflow

• Limiting work-in-progress

• Focusing on the delivery of work items

• Continuous improvement through feedback loops

Waterfall

Components:

• Distinct development phases (Requirements, Design, Implementation, Verification, Maintenance)

• Formal documentation and approvals

• Sequential flow of activities

Concepts:

• Linear and sequential software development model

• Emphasis on upfront planning

• Defined milestones and deliverables

• Limited flexibility to accommodate changes

Iterative Development

Components:

• Iterative development cycles

• Incremental delivery of working software

• Feedback loops and continuous improvement

Concepts:

• Developing software in small, incremental steps

• Delivering working software at the end of each iteration

• Incorporating user feedback

• Allowing for changes and adaptations

Code Reviews

Components:

• Code review tools (e.g. GitHub, Bitbucket, GitLab)

• Peer review process

• Checklists and guidelines

Concepts:

• Collaborative review of code changes

• Identifying potential issues, bugs, and improvements

• Knowledge sharing and skill development

• Maintaining code quality and consistency

Code Quality Metrics

Components:

• Static code analysis tools (e.g. SonarQube, Checkstyle)

• Code coverage tools (e.g. Jacoco, Istanbul)

• Code complexity metrics (e.g. cyclomatic complexity, maintainability index)

Concepts:

• Measuring code quality and maintainability

• Identifying code smells and technical debt

• Enforcing coding standards and best practices

• Tracking improvements in code quality

Security Audits

Components:

• Vulnerability scanning tools (e.g. Nessus, Qualys)

• Penetration testing tools (e.g. Burp Suite, OWASP ZAP)

• Security assessment frameworks (e.g. OWASP, NIST)

Concepts:

• Identifying security vulnerabilities

• Evaluating security controls

• Ensuring compliance with security standards

• Providing security improvement recommendations