14 docs tagged with "pipelines"

High-maturity practices for the protection of pipelines, with a focus on governance, simulated attack and Zero Trust

Objective verification checklist of the adoption of security practices in CI/CD pipelines

Technical and organisational mechanisms to ensure automatic enforcement of security policies in IaC pipelines.

How to apply secure CI/CD practices throughout the application lifecycle, with proportionality by risk, normalised user stories and auditable evidence

Practical integration of IaC security practices into the SDLC, with proportionality by risk, reusable user stories and auditable evidence

Set of recommended policies to sustain and legitimise the CI/CD security practices described in the chapter

Organisational policies needed to frame and reinforce governance and security in the use of Infrastructure as Code (IaC)

Why this chapter is exceptional, which sources support the IaC requirements catalogue and how to create/adapt the organisational catalogue

Assurance of secure and controlled execution of containers in pipelines and shared environments

Security practices for continuous integration and delivery pipelines, with a focus on automation, traceability and control proportional to risk

Rules for the secure construction and review of pipelines as code, with controlled triggers and predictable environments.

Strategies to protect secrets in pipelines, avoid hardcoding and ensure secure injection via vaults or variables.

Practices to protect branches, control changes and ensure traceable versioning of the code used in pipelines.

Practical upskilling for technical teams that develop, review or operate IaC projects securely