Introduction to CICDGuard - Orchestrating visibility and security of CICD ecosystem
summary
An open-source tool called CICDGuard scans CI/CD platforms with modular Python scanner modules, stores detailed metadata in a Neo4j graph model, and automatically links nodes (users, branches, builds, artifacts) to surface misconfigurations and cross-platform impact — for example finding users without MFA who have write access that trace to a Jenkins build and JFrog artifact. Outputs include terminal, JSON and Neo4j console; demos scan four technologies (GitHub, GitHub Actions, Jenkins, JFrog), require a read‑only service account, and successfully identifies real relationships and issues.
AI-written summary · about
chapters (6)
- 0:00Introduction
- 3:14Security in CI/CD
- 8:28Visibility and governance challenges
- 11:19CICDGuard architecture
- 18:03Live demo
- 29:53Summary
related talks
42mHow To Have Visibility And Security OF A CICD Pipeline
20mA Practical Guide to CI/CD Security Gating
39mContinuous Security at the Next Level
22mGuardians of Code: Continuously Monitoring Security and DevOps Compliance
32mAutomating Security Compliance at Scale
23mBuilding a Secure By-Design Pipeline with an Open-Source Stack
27mSecure by Design: Embedding DevSecOps into Your GitOps Workflows
37mA Secure Continuous Delivery Pipeline