Compliance > Software Supply Chain > CIS 1.0 > Build Pipelines >

Pipeline Integrity

N/A

Source

Chain Bench

2.4

Version

cis-1.0

2.4 Pipeline Integrity

2.4.2 Ensure all external dependencies used in the build process are locked

Recommended Action

For every external dependency in use in pipelines, lock it.

2.4.6 Ensure pipeline steps produce an SBOM

Recommended Action

For each pipeline, configure it to produce an SBOM on every run.

Aqua Container Security

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.