CI/CD Security

18 Apr A Deep Dive into CI/CD Pipelines Vulnerabilities (IV) : Protecting against Artifact Poisoning through Software Attestations

Posted at 14:14h in CI/CD Security by Luís García 0 Comments

Explore how Software Attestations can protect CI/CD pipelines from Artifact Poisoning and enhance security in our detailed guide...

29 Feb CI/CD Best Practices: Overcoming CI/CD Challenges and Common Pitfalls

Posted at 15:36h in CI/CD Security, SDLC by Fátima Said 0 Comments

Unlock the full potential of CI/CD in software development with our expert guide. Dive into common challenges, practical solutions, and best practices to enhance efficiency, security, and quality in your development pipeline. Start transforming your software delivery today ...

27 Feb A Deep Dive into CI/CD Pipelines Vulnerabilities (III): Artifact Poisoning and Code Injection

Posted at 13:55h in CI/CD Security by Luís García 0 Comments

Uncover the complexities of Indirect Poisoned Pipeline Execution (I-PPE) in CI/CD pipelines. Join our series on Poisoned Pipeline Execution for in-depth insights into GitHub protections and mitigation strategies. Stay ahead of evolving threats! ...

Implementing CI/CD Best Practices for Success

22 Feb CI/CD Best Practices: Transforming Software Development

Posted at 16:00h in CI/CD Security, SDLC by Fátima Said 0 Comments

Discover CI/CD best practices for software development, enhancing speed, quality, and security with our guide to Agile and DevSecOps integration ...

06 Feb A Deep Dive into CI/CD Pipelines Vulnerabilities (II) : Indirect Poisoned Pipeline Execution (I-PPE)

Posted at 17:00h in CI/CD Security by Luís García 0 Comments

16 Jan Software Supply Chain Security Threats in the Package Stage

Posted at 16:37h in Attacks, CI/CD Security, SDLC, Software Supply Chain by Fátima Said 0 Comments

The software package stage is a critical juncture in the software supply chain lifecycle, but it is also a vulnerable point. Learn about common threats that can arise during this phase, such as compromised packages and compromised dependencies, and how to mitigate them with robust...

Introduction to Software Supply Chain Protection with NIST SP 800-204D

28 Dec Build Security: A Practical Guide to Protecting Software Supply Chains Using NIST SP 800-204D

Posted at 10:00h in CI/CD Security, SDLC, Software Supply Chain by Jesús Cuadrado 0 Comments

Learn about the importance of software supply chain security (SSCS) and how to implement it into your CI/CD pipelines using the Secure Software Development Framework (SSDF) from NIST SP 800-204D public draft. ...

19 Dec A Deep Dive into CI/CD Pipelines Vulnerabilities (I) : Poisoned Pipeline Execution (PPE)

Posted at 15:24h in CI/CD Security by Luís García 0 Comments

Discover the dangers of Poisoned Pipeline Execution (PPE) and how to protect your CI/CD pipelines from this security risk. We will also introduce Xygeni Scanner, a tool that can help you identify and remediate PPE vulnerabilities in your pipelines. ...

05 Dec Ensure Security Configuration in DevOps Tools

Posted at 14:08h in CI/CD Security by Fátima Said 0 Comments

"Enhance your DevOps security with proactive measures. Safeguard your CI/CD pipeline through robust branch protection, secure plugin management, and regular security audits. Join the DevOps community for insights and best practices. Elevate your security standards now....

19 Oct Xygeni Supports the DevSecOps Community with Their First Online Summit

Posted at 16:37h in CI/CD Security by Fátima Said 0 Comments

Join Xygeni in our mission to empower the DevSecOps community. Explore our inaugural online summit and discover the latest trends, insights, and best practices in DevSecOps. Be part of the future of secure DevOps. Save your free seat today!...

28 Sep Xygeni Webinar: Best practices for CI/CD protection from OWASP perspective

Posted at 14:21h in CI/CD Security by Fátima Said 0 Comments

Strengthen Your CI/CD Security: Join Our OWASP Perspective Webinar! Discover best practices to reduce risk and fortify your security posture in our latest CI/CD Security Webinar. Learn from experts Luis Rodriguez and Luis Manuel García. Register now...

19 Sep Beyond Vulnerability Management: The Expanding Horizons of ASPM

Posted at 16:28h in CI/CD Security, SDLC, Software Supply Chain by Jesús Cuadrado 0 Comments

Dive into the expansive realm of ASPM beyond just vulnerability management. Discover its multifaceted approach to application security and why it's pivotal for modern businesses. ...

Securing the Software Supply Chain