  DevOps describes a method to reorganize the way different disciplines in
software engineering work together to speed up software delivery. However, the
introduction of DevOps-methods to organisations is a complex task. A successful
introduction results in a set of structured process descriptions. Despite the
structure, this process leaves margin for error: Especially security issues are
addressed in individual stages, without consideration of the interdependence.
Furthermore, applying DevOps-methods to distributed entities, such as the
Internet of Things (IoT) is difficult as the architecture is tailormade for
desktop and cloud resources. In this work, an overview of tooling employed in
the stages of DevOps processes is introduced. Gaps in terms of security or
applicability to the IoT are derived. Based on these gaps, solutions that are
being developed in the course of the research project SCRATCh are presented and
discussed in terms of benefit to DevOps-environments.
