How to Secure a CI/CD Pipeline: A Prioritized Checklist
A prioritized, practical checklist for securing CI/CD pipelines: access control, secrets, runner isolation, dependency and action pinning, artifact signing and logging.
#ci/cd security
Everything we have written about ci/cd security.
What Is DevSecOps? Building Security Into the Pipeline
DevSecOps moves security checks into each stage of the pipeline. Here is what runs where, how to keep it fast, and a practical order to roll it out.