Understanding DevOps Security of Google Workspace Apps

Cloud-based workspace systems, such as Google Workspace and Microsoft OneDrive, have enabled third-party developers to create and upload functionality-rich applications (referred to as add-ons). Existing studies have primarily examined user-centric data protection and permission management of this emerging ecosystem, but the underlying DevOps mechanisms that regulate add-on development, deployment, and operation remain largely unexplored.