How to Secure a CI/CD Pipeline: A Prioritized Checklist
A prioritized, practical checklist for securing CI/CD pipelines: access control, secrets, runner isolation, dependency and action pinning, artifact signing and logging.
Everything we have written about owasp.
A prioritized, practical checklist for securing CI/CD pipelines: access control, secrets, runner isolation, dependency and action pinning, artifact signing and logging.
Practical secure coding habits for input handling, secrets, authentication, dependencies and logging, with short code examples you can apply on your next pull request.
All 10 risks in the OWASP Top 10:2025, each with a simple example and the fix developers should apply, plus what changed from the 2021 list.