How To Have Visibility And Security OF A CICD Pipeline
summary
Claims an open source tool called CI CD Guard that builds a node and edge graph of pipelines and spots misconfigurations across GitHub repos GitHub Actions Jenkins and JFrog Artifactory. Scanners run independently and emit JSON or populate neo4j so searches reveal which teams use an uncertified action version which builds touch a sensitive artifact and which plugins or users are vulnerable. Demo records scanning, a minimalist UI, and a roadmap to add more integrations deeper analysis and search.
AI-written summary · about
chapters (10)
- 0:00CI/CD visibility and security
- 1:08Speaker background and project overview
- 2:54CI/CD ecosystem building blocks
- 4:19CI/CD visibility challenges
- 8:14CI/CD security methodology
- 13:16CI/CD Guard introduction
- 18:23CI/CD Guard architecture
- 21:58Demo: CI/CD Guard scanners
- 31:58Future roadmap
- 41:53Q&A
related talks
36mIntroduction to CICDGuard - Orchestrating visibility and security of CICD ecosystem
40mSecure by Default: Building an AI-Augmented, OSS-Powered Reusable CI/CD Pipeline
23mBuilding a Secure By-Design Pipeline with an Open-Source Stack
20mA Practical Guide to CI/CD Security Gating
37mA Secure Continuous Delivery Pipeline
32mBuilding a Secure By-Design Pipeline with an Open Source Stack
39mContinuous Security at the Next Level- 32mBuilding a Secure By-Design Pipeline with an Open Source Stack