Securing the Software Supply Chain
GovInfoSecurity With the advent of CI/CD pipelines, supply chain attacks have become more prevalent – and as the recent SolarWinds breach has demonstrated, the impact of such breaches can be vast and rippling. This eBook addresses questions raised by security leaders that want to better understand their organization’s development environments, the risks development tools expose and the best practices and approaches for securing them. Review best practices to securing developer endpoints, the applications being developed, as well as the tools and admin consoles used to run CI/CD pipelines ...
Source: govinfosecurity.com