DevSecOps
Spinnaker Deployment Security
Securing Spinnaker's multi-cloud deployment pipelines with authentication, authorization, pipeline constraints, and artifact verification.
Feb 25, 20235 min read
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Securing Spinnaker's multi-cloud deployment pipelines with authentication, authorization, pipeline constraints, and artifact verification.
Security considerations for blue-green deployment strategies including environment parity, rollback integrity, and data migration safety.
Configure GitHub repository security settings for branch protection, secret scanning, dependency alerts, and code scanning.
How to lock down Jenkins pipelines against credential theft, script injection, and unauthorized access with practical hardening steps.
Securing Tekton CI/CD pipelines on Kubernetes with task isolation, supply chain verification, and least-privilege service accounts.
Using canary deployment strategies to catch security regressions before they reach all users, with monitoring patterns for security-relevant metrics.
Practical Docker security from image building to runtime, covering multi-stage builds, user namespaces, and image scanning.
A practical guide to hardening your GitHub Actions workflows against supply chain attacks, secret leaks, and privilege escalation.
Hardening Flux CD deployments with multi-tenancy, RBAC, secret encryption, and image verification for secure GitOps workflows.
Weekly insights on software supply chain security, delivered to your inbox.