Tag: CI/CD
All the articles with the tag "CI/CD".
Selecting more than one tag in the sidebar shows only posts that have every selected tag.
- #Contribution#Python#CI/CD
web3-utils: A Version Gate That Couldn't Read Prereleases
stakefish/web3-utils.py's CI version gate compared versions by keeping only their numeric parts, so beta and rc numbers turned into patch numbers. It rejected valid promotions and let a downgrade through. A PR that switches to packaging.version.
3 min read - #Contribution#CI/CD#GitHub Actions
eth2-monitor: Release Binaries That Overwrite Each Other
stakefish/eth2-monitor's release workflow builds eight OS and architecture combinations into two file names, so only the Windows builds survive. An issue asking which platforms the release is meant to ship.
2 min read - #Pipeline Controls#CI/CD#CI/CD Security
CI/CD Security Controls and Implementation in the Pipeline Design
A technical overview of the CI/CD security controls implemented across the pipeline design, from token permissions to release signing, paired with concrete threat-mapped implementation detail.
12 min read - #Hoodi#Validator#DevSecOps
Prioritizing Security Controls: What Happened and What I Learned
Lessons from building a Hoodi validator on AWS about deployment speed, infrastructure cost, operational burden, and over-relying on AI when applying DevSecOps controls.
5 min read - #Contribution#Supply Chain Security#NIST SP 800-204
Private Registries and Package Mirrors: What I Contributed to the SEAL Security Frameworks
A new SEAL Security Frameworks page on internal package registries - what mirroring defends against, how routing blocks dependency confusion, and why the registry becomes a trust component in its own right.
11 min read - #Pipeline Controls#NIST SP 800-204D#CI/CD
Securing Workflows in CD Pipelines
Supply chain security measures also apply to controls during the CD process.
4 min read - #Pipeline Controls#NIST SP 800-204D#CI/CD
Securing Workflows in CI Pipelines - Secure Code Commits
Appropriate forms of testing should be performed before code commits
2 min read - #NIST SP 800-204D#CI/CD#CI/CD Security
Securing Workflows in CI Pipelines - Integrity of Evidence Generation During Software Updates
How to ensure the integrity of evidence generation during software updates
6 min read - #NIST SP 800-204D#CI/CD#CI/CD Security
Securing Workflows in CI Pipelines - Secure Pull-Push Operations on Repositories
Deep dive into secure Pull-Push Operations on Repositories referring to NIST SP 800-204D
6 min read - #Pipeline Controls#NIST SP 800-204D#CI/CD
Securing Workflows in CI Pipelines - Secure Build
Introduce the requirements for secure build and associated tools to secure your build stage in CI/CD pipeline.
19 min read - #Pipeline Controls#NIST#NIST SP 800-218
Relationship Between NIST SP 800-218 and SP 800-204D
Review the relationship between NISTP SP 800-218 and SP 800-204D. Walk through how the SSDF specifically focuses on cloud-native application CI/CD pipelines
11 min read