9 docs tagged with "automação"

Training content to ensure the responsible and secure use of automated tools, code assistants and generative AI

Rules and tools for security validation directly in the development environment (pre-commit, IDE, CLI)

Risks introduced by pervasive automation in the CI/CD pipeline and the corresponding control, validation and evidence measures

Security practices for continuous integration and delivery pipelines, with a focus on automation, traceability and control proportional to risk

Rules for the secure construction and review of pipelines as code, with controlled triggers and predictable environments.

Techniques and tools to ensure the presence of security controls directly in source code

Integration of security validators (SAST, secrets, IaC, containers) directly into the pipeline, with mandatory execution.

Requirements and practical validations to ensure the existence, integrity and impact of threat modelling in the CI/CD lifecycle

Prescriptive rules for the secure use of automation/assistance in writing and changing IaC, with validations and evidence by risk level