3 docs tagged with "runners"

Measures to segregate runners by application, avoid persistence and ensure ephemeral, controlled execution environments.

Assurance of secure and controlled execution of containers in pipelines and shared environments

Canonical catalogue of security requirements for continuous integration and delivery pipelines (CIC-001 to CIC-010), with applicability by risk level and acceptance criteria for pipeline design, secrets management, runner isolation, artefact integrity and security gates.