Cicd Security

2 posts tagged with “Cicd Security”

AI-Assisted Development Best Practices Cicd Compliance CI/CD Cost CI/CD Monitoring Cicd Security DORA Metrics Engineering Management GitHub Actions MCP Pipeline Stability Product

CI/CD Monitoring

Supply Chain Security

Cicd Security Best Practices

Supply Chain Security in CI/CD: NIST, SLSA, and What to Do First

Supply chain security in CI/CD, minus the name-dropping. What NIST SP 800-204D actually is, why SLSA level numbers changed, and the cheapest first step.

18 September 20269 min read

CI/CD Monitoring

Pinning CI Dependencies

Cicd Security Best Practices

Pin GitHub Actions to SHA (and What the Other Providers Allow)

Pin GitHub Actions to SHA is near-universal advice. What it means on GitLab, why CircleCI orbs cannot be pinned at all, and what pinning still does not fix.

17 September 20268 min read