CI/CD pipeline
Cycode Discovers a Supply Chain Vulnerability in Bazel
Executive Summary The Cycode Research Team discovered a software supply chain vulnerability in one of Google’s open source flagship products, Bazel. We found that a GitHub Actions workflow could have been injected ...
CI/CD Pipeline Security: Best Practices Beyond Build and Deploy
CI/CD Pipeline Security Given the demand for rapid innovation and the adoption of agile methodologies, Continuous Integration/Continuous Deployment (CI/CD) pipelines have become the foundation on which all DevOps processes are built. They ...
How Secure Code Signing Aligns With The Principles of DevSecOps
Software supply chain attacks are seeing an unprecedented surge. According to the Sonatype State of the Software Supply Chain Report, twice as many incidents were recorded in 2023 as compared to the ...
Are Your Code Signing Processes Mature? A Guide to Navigating Your Code Signing Maturity Journey
On June 1, 2023, the Certificate Authority (CA)/Browser Forum’s new code signing baseline requirements came into effect, enforcing changes to the way organizations handle and protect code signing private keys. According to ...
The Role of WAAP Platforms in the CI/CD Pipeline
A WAAP solution could play a critical role in CI/CD process. It helps protect apps and APIs from threats throughout the entire SDLC. The post The Role of WAAP Platforms in the ...
Software Supply Chain Attacks: Clear and Present Danger
More than a year after the SolarWinds Sunburst attack and most companies are still exposed to software supply chain attacks. In a study conducted by Argon Security at Aqua Security, it was ...
CI/CD Pipeline – A Fuel to SDLC
What does your engineering team require to deliver bug-free code at a high velocity? It’s a fast and reliable CI/CD pipeline. CI CD Pipeline acts as oxygen in Software Development Lifecycle. It’s ...
CI/CD Pipeline – A Fuel to SDLC
The post CI/CD Pipeline – A Fuel to SDLC appeared first on PeoplActive ...
Lessons in Securing Development Environments
The new world of software development is inherently collaborative — development teams are geographically dispersed and require easily accessible and automated tools to ship products and features quicker with confidence. The new ...
Everything You Need to Know About CI/CD and Security
CI/CD is a recommended technique for DevOps teams and a best practice in agile methodology. CI/CD is a method for consistently delivering apps to clients by automating the app development phases. Continuous ...
