Integrating software supply chain security in DevSecOps CI/CD pipelines

NIST released its final guidelines for integrating software supply chain security in DevSecOps CI/CD pipelines (SP 800-204D). In this Help Net Security video, Henrik Plate, Security Researcher at Endor Labs, talks about this report, which provides actionable measures to integrate the various building blocks of software supply chain security assurance into CI/CD pipelines to enhance the preparedness of organizations to address supply chain security in the development and deployment of cloud-native applications. This framework comes … More →

The post …

actionable assurance building cd pipelines cybersecurity devsecops don't miss endor labs framework guidelines help net security hot stuff integrate labs nist pipelines report researcher security security assurance security researcher software software supply chain software supply chain security supply supply chain supply chain security talks video