Tag: Pipeline Controls
All the articles with the tag "Pipeline Controls".
Selecting more than one tag in the sidebar shows only posts that have every selected tag.
- #Pipeline Controls#CI/CD#CI/CD Security
CI/CD Security Controls and Implementation in the Pipeline Design
A technical overview of the CI/CD security controls implemented across the pipeline design, from token permissions to release signing, paired with concrete threat-mapped implementation detail.
12 min read - #Pipeline Controls#Private Repository#DevSecOps
Private Repositories Security Review Process
A practical process for reviewing, approving, and continuously reassessing third-party artifacts before internal use.
4 min read - #Pipeline Controls#NIST SP 800-204D#CI/CD
Securing Workflows in CD Pipelines
Supply chain security measures also apply to controls during the CD process.
4 min read - #Pipeline Controls#NIST SP 800-204D#CI/CD
Securing Workflows in CI Pipelines - Secure Code Commits
Appropriate forms of testing should be performed before code commits
2 min read - #Pipeline Controls#NIST SP 800-204D#CI/CD
Securing Workflows in CI Pipelines - Secure Build
Introduce the requirements for secure build and associated tools to secure your build stage in CI/CD pipeline.
19 min read - #Pipeline Controls#NIST#NIST SP 800-218
Relationship Between NIST SP 800-218 and SP 800-204D
Review the relationship between NISTP SP 800-218 and SP 800-204D. Walk through how the SSDF specifically focuses on cloud-native application CI/CD pipelines
11 min read