Pipeline Tampering Risks & Prevention

[ducthinh993]

Hi folks, As a DevSecOps practitioner for many sizes of development, there is a critical one for maintaining DevSecOps Pipeline to prevent integrity violation and DRY principle with the pipeline consuming

Abstraction Ideas:

• Pipeline definition store as separate repos
• Consuming pipeline as git sub-modules
• Pipeline call should be visible and measured

Benefits:

• [ ] Pipeline enforcement
• [ ] Pipeline integrity
• [ ] Pipeline scalability

I'm happy to help but not so sure which category should we put it on

[Ali-Yazdani]

Hi, Thanks for the great suggestion, Please create a file and start to write them down. After that, we can review them and see if it needs to reorganize.

So easy 😄

[Ali-Yazdani]

Dear @ducthinh993, I assigned it to you. Please feel free and start work on it. I'm looking forward to approving your Pull Request.