Originally presented at HashiTalks: Secure 2023.
Whether you are a developer, operator, or other kind of engineer, you will need to secure your continuous integration frameworks and deployment pipelines. Rosemary Wang provides a list of practices and patterns to build a minimum secure pipeline. From access control to pipelines as code, you can apply these basics to improving your CI/CD pipelines and educating other engineers, no matter what you're deploying.