Third-Party Risk Questionnaire Essentials CI/CD Security and Supply Chain Protection · 3:27 Dive into the critical process of vetting third-party vendors through targeted security questionnaires, covering everything from encryption standards and access controls to SOC reports and ISO certifications that protect your data pipeline.
Credible Risk Assessment Responses CI/CD Security and Supply Chain Protection · 3:43 Navigating security questionnaires and risk assessments becomes straightforward when you know how to document controls and gather evidence-based responses. Listeners will learn how to approach third-party risk inquiries with confidence, ensuring answers are accurate, well-supported, and aligned with their actual security posture.
CI/CD Security Fundamentals: Ephemeral Runners & Isolation CI/CD Security and Supply Chain Protection · 4:17 Diving into the critical security risks of persistent CI/CD runners, this chapter explores how ephemeral, isolated build environments eliminate the dangers of state persistence and cross-build contamination to protect your software supply chain.
Least Privilege in CI/CD: Minimal Access Principles CI/CD Security and Supply Chain Protection · 3:09 Exploring the critical security principle of least privilege in CI/CD pipelines, this track breaks down how to properly scope service account permissions and identities to minimize attack surfaces and prevent unauthorized access across your deployment workflows.
Secrets Management in Automated Pipelines CI/CD Security and Supply Chain Protection · 3:34 Secrets Management in Automated Pipelines tackles one of the most common and costly mistakes in modern DevOps: improperly handled credentials and sensitive data within CI/CD workflows. Listeners will learn how exposed secrets like hard-coded API keys and tokens can lead to devastating security breaches, and how to keep sensitive information out of source control.
Dependency Pinning and Locked Builds CI/CD Security and Supply Chain Protection · 3:22 Dependency pinning and locked builds are essential practices for maintaining consistent, reliable software builds by controlling exact versions of dependencies. Listeners will learn how unpredictable upstream changes can silently break applications and how locking dependencies protects your CI/CD pipeline from version chaos.
Environment Capture and Build Reproducibility CI/CD Security and Supply Chain Protection · 4:07 Diving into one of the most frustrating pain points in modern software delivery, Environment Capture and Build Reproducibility explores why "it worked on my machine" failures happen and how locking down your build environments and dependencies is essential to a secure, reliable CI/CD pipeline.
Approval Gates and Release Validation CI/CD Security and Supply Chain Protection · 4:09 A deep dive into the approval gates and validation checkpoints that protect your software release pipeline, teaching you how automated checks, quality gates, and security scans work together to ensure only safe, high-quality code makes it to production.
Artifact Signing and Integrity Verification CI/CD Security and Supply Chain Protection · 5:14 Explore the critical practice of artifact signing and integrity verification, where you'll learn how cryptographic signatures and hash functions serve as your first line of defense against malicious tampering in the software supply chain.
Release Governance: Who Controls Production Deployments CI/CD Security and Supply Chain Protection · 4:18 Explore the critical question of who holds the authority to push code into production, and why separating development from deployment control is a foundational principle of secure, well-governed CI/CD pipelines.
Detecting Compromised Dependencies CI/CD Security and Supply Chain Protection · 3:24 Detecting Compromised Dependencies dives into the hidden dangers lurking within trusted third-party packages, teaching listeners how malicious code can infiltrate software supply chains and what to watch for when dependencies are silently compromised.
Incident Response: Containing Supply Chain Breaches CI/CD Security and Supply Chain Protection · 5:44 A fast-paced guide to handling supply chain security incidents, walking you through the critical first steps of containment when a compromised dependency is discovered in your pipeline.
Patching and Recovery from Supply Chain Incidents CI/CD Security and Supply Chain Protection · 3:48 Discover how to respond effectively when your software supply chain is compromised, walking through the critical steps of damage assessment, system isolation, and incident documentation needed to contain and recover from a breach.
Risk Criticality Tiers in Tech Infrastructure CI/CD Security and Supply Chain Protection · 4:12 Explore how to classify your tech infrastructure by risk criticality, learning to distinguish between mission-critical systems that can cause catastrophic failures from those with lower business impact, enabling smarter, more strategic security decisions.
RTO and RPO: Recovery Time and Point Objectives CI/CD Security and Supply Chain Protection · 3:09 Explore the essential concepts of Recovery Time Objective (RTO) and Recovery Point Objective (RPO), learning how to define acceptable downtime thresholds and data loss tolerances to build resilient CI/CD pipelines and disaster recovery strategies.