x.comthreadKubesploit (@kubesploit) on X
An X post pointing to a case study on Cilium's defense-in-depth approach to open-source CI/CD supply chain security, covering access controls, dependency pinning, credential isolation, and cryptographic verification. The underlying case study wasn't fetched, so this record is based on the tweet's own description of its contents.
TL;DR Tweet linking to a case study on Cilium's CI/CD supply chain hardening (access controls, dependency pinning, credential isolation, cryptographic verification).
Technologies named here
Techniques named here
- Defense-in-depth supply chain security for open source CI/CD
- Access controls
- Dependency pinning
- Credential isolation
- Cryptographic verification
Related in DevSecOps
jfrog.comarticleJFrog: The Governance Gap Between Your Policy and Your Pipeline
stepsecurity.ioarticleDev Machine Guard Now Supports Windows - StepSecurity
socket.devwriteupSocket: TanStack npm Packages Compromised
securitylab.github.comadvisory