EXPANDING APPROACHES TO FORMAL VERIFICATION INTEGRATION INTO CI/CD PIPELINES USING MODULAR ARCHITECTURE AND KNOWLEDGE REPOSITORIES

Authors

DOI:

https://doi.org/10.35546/kntu2078-4481.2025.3.2.65

Keywords:

formal verification, DevSecOps, CI/CD, knowledge repository, model reuse, automation, modularity, cloud verification, software assurance

Abstract

The article explores the methodological, architectural, and technological foundations for integrating formal verification into continuous integration and deployment (CI/CD) processes using a modular architecture and centralized knowledge repositories. In the context of the widespread adoption of cloud development, microservice-based systems, and DevSecOps practices, there is a growing need for verification mechanisms capable of integrating seamlessly into fast-paced, dynamic, and automated software delivery pipelines. The proposed concept focuses on the reuse of formalized artifacts – such as specifications, behavior models, verified properties, analysis scenarios, and verification results – by storing them in a centralized knowledge base. This repository supports metadata, semantic indexing, versioning logic, and compatibility mechanisms, enabling efficient reintegration of artifacts across different projects or CI/CD iterations without the need for complete re-analysis. The paper presents a modular system architecture that enables the integration of formalized verification steps into CI/ CD pipelines through built-in adapters for popular systems such as Jenkins, GitLab CI, and GitHub Actions. A mechanism for managing verification checkpoints is proposed, allowing automatic storage and updating of verification artifacts upon every code or requirements change. The use of artificial intelligence (via ML models) enhances the system’s capabilities by enabling automated selection of relevant artifacts, prediction of verification complexity for specific code changes, and recommendation of optimal verification strategies.

References

Baier, C., Katoen, J. (2020). Formal verification of software: Challenges and techniques. Formal Methods in System Design.

Clarke, E., Grumberg, O., Peled, D. (2022). Model checking. MIT Press.

Bjørner, N., Gurevich, Y. (2021). Using cloud technologies for scalable formal verification. IEEE Transactions on Cloud Computing.

Ng, B., Turner, S. (2020). Cloud-based formal verification tools for DevSecOps. ACM Digital Library.

Microsoft Research (2020). Formal verification of cloud services: Case studies and methods. ACM Cloud Computing.

Amazon Web Services. (2021). TLA+: Model checking for cloud systems. https://aws.amazon.com/tla/

Published

2025-11-28