#cicdpipelinesecurity — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #cicdpipelinesecurity, aggregated by home.social.
-
SourceHut recently added the possibility to use deploy keys instead of personal SSH keys for accessing Git repositories.
In a new blog post, we explain step by step how to take advantage of this new feature to increase the security of your CI/CD pipelines.
https://skyplabs.com/blog/sourcehut-deploy-keys/
If you are currently using personal SSH keys in your CI/CD pipelines for accessing Git repositories hosted on SourceHut, we recommend you replace them quickly with deploy keys.
#SourceHut #Git #CI #CICD #CicdPipelineSecurity #Security #DevOps #DevSecOps
-
SourceHut recently added the possibility to use deploy keys instead of personal SSH keys for accessing Git repositories.
In a new blog post, we explain step by step how to take advantage of this new feature to increase the security of your CI/CD pipelines.
https://skyplabs.com/blog/sourcehut-deploy-keys/
If you are currently using personal SSH keys in your CI/CD pipelines for accessing Git repositories hosted on SourceHut, we recommend you replace them quickly with deploy keys.
#SourceHut #Git #CI #CICD #CicdPipelineSecurity #Security #DevOps #DevSecOps
-
The Spice Must Flow (Through a Trust Boundary)
Supply chain attacks like npm's Shai-Hulud campaign exploited CI/CD credentials, not cryptography — here's why OIDC and provenance attestation actually fix it.