Time for a Check-Up of Your CI/CD Pipelines!
summary
An approach and a free analysis tool to secure and audit CI/CD pipeline code across an organization, addressing risks from untrusted container images, unmanaged libraries and leaked secrets. The talk covers detecting drift and technical debt, finding security issues, tracing container origins that access secrets, ensuring supply-chain compliance (ISO 27001, SecNumCloud, NIS2, etc.), and producing an enterprise CI/CD dashboard to simplify audits and reduce supply-chain attack risk.
AI-written summary · about
chapters (8)
- 0:00CI/CD importance
- 2:06CI/CD as delivery backbone
- 4:13Pipeline risks
- 7:04GitLab checkup tool
- 8:29CI/CD templates benefits
- 10:56Advanced pipeline cleanup
- 13:26When to check pipelines
- 15:53Conclusion
related talks
40mBest Practices for Securing CI/CD Pipelines or How to Get Security Right
24mIt's Time for a Check-Up of Your CI/CD Pipelines!
38mSecuring your CI/CD Pipeline
40mAre your CI/CD Pipelines Secure?
32mAre your CI/CD Pipelines Secure
33mAre your Pipelines Secure? Lock-down unsecured CI/CD Pipelines
48mCI/CD Security- 33mAre your Pipelines Secure? Lock-down unsecured CI/CD Pipelines