DevSecOps
CircleCI Orb Trust and Pinning in 2026
How to manage CircleCI orb trust in 2026: certified versus uncertified orbs, version pinning, contexts, OIDC, and the controls that hold under real attacker pressure.
Apr 8, 20266 min read
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
How to manage CircleCI orb trust in 2026: certified versus uncertified orbs, version pinning, contexts, OIDC, and the controls that hold under real attacker pressure.
Practical steps to secure your CircleCI pipelines, from context management and OIDC to orb vetting and runner isolation.
CircleCI told every customer to rotate every secret on January 4, 2023. Here is what actually happened and why the scope was total.
Weekly insights on software supply chain security, delivered to your inbox.