Cloud Native Security

CI/CD

Drive Towards Preventing Breaches and Pipeline Attacks with Prisma Cloud

In today’s dynamic software development landscape, the agility of engineers and their tools evolve at an unprecedented rate, calling for a paradigm shift in our security approach.

AppSec

CI/CD

Cloud Native Application Protection Platform

Nov 14, 2023

By Taylor Smith

Cloud Native Security

Cloud Native Application Protection Platform

Cloud Workload Protection Platform

Cloud Security Posture Management

Data Security Posture Management

Cloud Infrastructure Entitlement Management

DevSecOps

Partners

Application Security, CI/CD

All the Small Things: Azure CLI Leakage and Problematic Usage Patterns

The issue reported by @NoCopy stated that “azure/login in some cases leaks Azure Application Variables to the GitHub build log.” The user included an example workflow, a relevant a...

Nov 14, 2023

By Aviad Hahami

AppSec, CI/CD, DevOps, Research

The GitHub Actions Worm: Compromising GitHub Repositories Through the Actio...

Learn how a novel attack vector in GitHub Actions allows attackers to distribute malware across repositories using a technique that exploits the actio...

Sep 14, 2023

By Asi Greenholts

CI/CD, DevOps

Unpinnable Actions: How Malicious Code Can Sneak into Your GitHub Actions W...

In today’s post, we look at action pinning, one of the profound mitigations against supply chain attacks in the GitHub Actions ecosystem. It turns out, though, that action pinning...

Aug 30, 2023

By Yaron Avital

AppSec, CI/CD, Research

Third-Party GitHub Actions: Effects of an Opt-Out Permission Model

GitHub Actions has gained immense popularity in recent years as a powerful and flexible automation platform for software development workflows. With its intuitive user interface, e...

Aug 16, 2023

By Yaron Avital

AppSec, CI/CD

How to Secure Jenkins’ Default Build Authorization Configuration

Jenkins is the most widely used CI/CD automation platform. Its flexibility and extensibility help thousands of organizations solve many of their engineering challenges.

Jul 25, 2023

By Asi Greenholts

CI/CD, DevSecOps

Abusing Repository Webhooks to Access Internal CI/CD Systems at Scale

With the increasing adoption of CI/CD systems, organizations tend to adopt a common CI/CD architecture. This architecture combines SaaS-based source control management systems — su...

Jul 13, 2023

By Omer Gil and Asi Greenholts

Application Security, CI/CD

AppSec for the Modern Engineering Ecosystem

Software engineering is changing, becoming a driving force in business and bringing about big changes in how application security (AppSec) is approached. Complexity is gaining the upper hand, with more developm...

May 18, 2023

By Daniel Krivelevich

Load more blogs