Blueprint for Securing Your CI/CD Pipelines

3 years ago thenewstack.io

Summary: This is a summary of an article originally published by The New Stack. Read the full original article here →

These incidents have prompted urgent and deliberate attention to hardening the overall cybersecurity posture of our software IT infrastructure. One critical area that has a lot of momentum, from the highest of government agencies to major cloud vendors and open source foundations, is around the security of our software supply chain.

Therefore, it is essential that we give equal consideration to securing our pipelines, just as we do for our production workloads.

We will use this as reference to drive our discussion around the desired security properties for our pipelines at various stages.

Plus there are existing cloud native monitors available; we just need to enable the right instrumentation in our pipelines to collect this telemetry data.

DevOps Articles