ToolypetMCP
advanced6 minutescross hub

CI/CD Security Pipeline

Secure your CI/CD pipeline: generate deploy keys, sign artifacts, create integrity hashes, and set up webhook verification.

ci-cdpipelinedeploymentsigningintegrity

이 레시피 활용 시점

Supply chain security for your deployment pipeline. Ensure code integrity from repository to production, preventing tampering at every stage.

단계

1

Generate deploy key

프롬프트:Generate Ed25519 deploy key for the CI/CD pipeline to access the Git repository
2

Create artifact signing key

프롬프트:Generate signing key for Docker image and artifact signing
3

Create artifact checksums

프롬프트:Generate SHA-256 hashes for build artifacts (Docker image, JS bundle, binary) for integrity verification
4

Sign deployment webhooks

프롬프트:Generate HMAC signature for deployment webhook payload to verify CI/CD triggers
5

CDN bundle integrity

프롬프트:Generate SRI hashes for production JavaScript and CSS bundles deployed to CDN

자주 묻는 질문

What is software supply chain security?

Ensuring code integrity from developer to production: signed commits, verified dependencies, signed artifacts, immutable builds, and deployment verification. SolarWinds and Log4j highlighted its importance.

Should I sign Docker images?

Yes. Use Docker Content Trust (Notary) or cosign (Sigstore). Image signing prevents running tampered images. Kubernetes can enforce signature verification with admission controllers.

관련 레시피