PL. 01 — System N.K.Fig. 3State: nominalFR
← Back to the plate

Fig. 3 — Secure CI/CD Pipeline

Integration of security and vulnerability management from the development stage.

  1. pipeline orchestration
  2. static and dynamic analysis
  3. image and dependency scanning
  4. secrets management
  5. cloud-native security
Context
SecDevOps project
Role
Setup of the secure integration chain

Technical decisions

  1. Shift left security.

    Static and dynamic analyses run automatically in every pipeline to catch flaws before deployment.

  2. Centralize secrets management.

    HashiCorp Vault securely distributes credentials without exposing them in source code or CI.

Result

Automated vulnerability detection before any deployment

Stack

  • GitLab CI
  • SonarQube
  • DAST
  • Trivy
  • HashiCorp Vault
  • Prisma Cloud

Source code github.com/nigh0st/pipeline-cicd-securise