CI/CD Pipeline Tools and Controls

I’d like to learn more about how a pipeline should be built in all stages from repos to all steps to deploy/config/monitor. I’m also looking to start layering controls and which ones to prioritize first and mature over time. I would start to do a current state to future state for my org. Are there books and trainings you’d recommend?

cd pipeline controls cybersecurity pipeline tools