Tag: build pipelines
Why Your CI/CD Pipeline Is Your Most Unprotected Attack Surface
Muhammad Yawar Malik | | application security, build agents, build pipelines, CI/CD security, Cloud Security, credential security, dependency security, deployment security, devops security, devsecops, ephemeral runners, GitHub Actions, infrastructure security, Jenkins security, least-privilege, pipeline security, provenance attestation, secrets management, secure pipelines, secure software development, software provenance, Software Supply Chain, supply chain attacks, third-party actions, XZ UtilsCI/CD pipelines often hold privileged credentials, execute third-party code and connect directly to production, making pipeline security one of the most overlooked risks in modern DevOps ...
How I Consolidated Duplicate Delivery Pipelines With Parameters and Build Tags
Ahmed Tariq | | Azure DevOps, build pipelines, CI/CD, deployment automation, devops, Release PipelinesTwo modules in a repository had near-identical Azure DevOps build and release definitions. A third would have required another pair. The delivery chain used five definitions: one change decider, two builds, and ...
Forget the Vibe-Coders, We Need to Support Responsible AI-Assisted Development
Guillaume Moigneu | | AI in development, automated security, build pipelines, developer roles, Human Oversight, orchestration, responsible AI use, software design, Software infrastructure, spec codingWhile AI tools are increasingly used in development, they should enhance rather than replace human input. Developers must shift from merely writing code to orchestrating and validating AI-generated code. This 'spec coding' ...
