A method, computer program product, and system for risk monitoring of continuous software delivery include a first plurality of test data. The first plurality of test data is associated with one or more software components. In response to receiving a changelog, a change in the received plurality of test data is determined. A risk profile for the one or more software components is generated, in response to receiving the first plurality of test data and the received changelog. A component code graph is generated, based on the risk profile associated with the one or more software components and a risk value associated with the generated risk profile is calculated, based on the component code graph.