Collection of CI/CD security best practices
When releasing app,binary or package make sure no one in supply chain tampered with your work.
Demand/Problem | Solution | Reference |
---|---|---|
Do you need Virtual Machine? | Virtual infrastructure management using OpenStack | Pan-Net cloud portal |
Do you need to install a container runtime? | Managing containers using Kubernetes | Pan-Net CaaS |
Do you need to track and manage changes of your code? | Code management using GIT | Pan-Net GitLab |
Do you need to manage your binary repositories? | Artifactory management using JFrog | Pan-Net Artifactory |
Do you need to manage credentials and keys? | Managing credentials and keys using Vault | Pan-Net Cloud Secrets |
How to automate your workloads? | Collection of DevOps and SRE practices | Pan-Net DevOps space |
Do you need to protect application/API? | Application security using WAF | Pan-Net WebShield |