Abstract: Concepts for synchronising and maintaining audited code and toolchain access in a modern software development pipeline are presented. In particular, by leveraging software bots (also known as software development bots) to monitor changes in a development team's preferred access control mechanism, such changes in the preferred state can be stored as preferred/target configuration in a source controlled repository. Further, the same (or other) software bots may be used to monitor for configuration drift between the source-controlled system and the preferred/target configuration stored in the repository and eliminate drifts automatically if possible or alert interested parties about those drifts.

Abstract: Concepts for synchronising and maintaining audited code and toolchain access in a modern software development pipeline are presented. In particular, by leveraging software bots (also known as software development bots) to monitor changes in a development team's preferred access control mechanism, such changes in the preferred state can be stored as preferred/target configuration in a source controlled repository. Further, the same (or other) software bots may be used to monitor for configuration drift between the source-controlled system and the preferred/target configuration stored in the repository and eliminate drifts automatically if possible or alert interested parties about those drifts.