Safeguard
Tag

pipeline-security

Safeguard articles tagged "pipeline-security" — guides, analysis, and best practices for software supply chain and application security.

32 articles

DevSecOps

CircleCI Security Configuration Guide

Practical steps to secure your CircleCI pipelines, from context management and OIDC to orb vetting and runner isolation.

Jan 30, 20265 min read
DevSecOps

Environment Variable Injection in CI/CD Pipelines

Environment variables in CI/CD systems carry secrets, configuration, and control flow. When attackers can inject or modify them, everything breaks.

Jan 26, 20264 min read
DevSecOps

GitLab CI/CD Security Configuration

Hardening GitLab CI/CD pipelines with protected variables, secure runners, and built-in security scanning.

Jan 26, 20264 min read
Cloud Security

Azure DevOps Pipeline Security Hardening: A Practical Guide

How to lock down your Azure DevOps pipelines against supply chain attacks, credential leaks, and unauthorized deployments.

Jan 16, 20268 min read
DevSecOps

Securing Azure DevOps pipelines against supply chain comp...

Pipelines now hold more privilege than the apps they build. Here's how Azure DevOps pipeline security actually breaks down—and how to close the gaps.

Jan 16, 20267 min read
DevSecOps

Environment Variable Injection in CI/CD: The Invisible Attack Surface

CI/CD pipelines trust environment variables implicitly. Injecting or modifying them can hijack builds, steal secrets, and compromise deployments.

Jan 10, 20264 min read
DevSecOps

CI/CD Pipeline Audit Logging: What to Capture and Why

Your CI/CD pipeline is a high-value target. Without proper audit logging, you will not know when it has been compromised until it is too late.

Jan 8, 20266 min read
DevSecOps

Securing CI/CD Pipelines from Supply Chain Attacks

CI/CD pipelines are the new attack surface. From poisoned dependencies to compromised build tools, here's how to lock down your software delivery infrastructure.

Jan 3, 20266 min read

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

No sales call required, even your agent can complete the purchase over MCP.

pipeline-security (Page 3) — Safeguard Blog