Items related to Secure Build Systems: Hardening CI, Runners, and Artifacts...
Synopsis
"Secure Build Systems: Hardening CI, Runners, and Artifacts Against Tampering"
Modern attackers don't need to breach production to ship malware-they only need to compromise your build. This book is written for experienced engineers, security practitioners, and platform teams responsible for CI/CD, release engineering, and software supply-chain risk. It provides an attacker-centric framework for reasoning about trust boundaries across repos, CI control planes, runners, and artifact stores, so hardening work is driven by evidence instead of folklore.
You'll learn how to lock down pipeline definitions and release gates, design runner isolation and ephemerality, and eliminate secret sprawl by moving from long-lived keys to OIDC-based workload identity. The book goes deep on dependency integrity and hermetic inputs, then shows how to make integrity verifiable through provenance and attestations, SLSA-aligned requirements, and in-toto models for multi-step supply chains. Finally, it covers artifact signing strategies (including Sigstore keyless flows), transparency logs, registry immutability, and deploy-time policy-as-code verification gates-plus practical incident response patterns for CI compromise, trust resets, and artifact recall.
Expect implementation-focused decision criteria, failure modes, and operational playbooks. Familiarity with CI/CD systems, cloud IAM, and container/package ecosystems is assumed; the emphasis is on building resilient, auditable, tamper-evident release pipelines at scale.
"synopsis" may belong to another edition of this title.
Search results for Secure Build Systems: Hardening CI, Runners, and Artifacts...
Stock Image
Secure Build Systems
Print on DemandSeller: PBShop.store US, Wood Dale, IL, U.S.A.
Seller rating 5 out of 5 stars
PAP. Condition: New. New Book. Shipped from UK. THIS BOOK IS PRINTED ON DEMAND. Established seller since 2000. Seller Inventory # L0-9798896653615
Stock Image
Secure Build Systems: Hardening CI, Runners, and Artifacts Against Tampering
Seller: California Books, Miami, FL, U.S.A.
Seller rating 5 out of 5 stars
Condition: New. Seller Inventory # I-9798896653615
Stock Image
Secure Build Systems
Print on DemandSeller: PBShop.store UK, Fairford, GLOS, United Kingdom
Seller rating 5 out of 5 stars
PAP. Condition: New. New Book. Delivered from our UK warehouse in 4 to 14 business days. THIS BOOK IS PRINTED ON DEMAND. Established seller since 2000. Seller Inventory # L0-9798896653615
Buy New
US$ 36.63
US$ 5.55 shipping
Ships from United Kingdom to U.S.A.
Ships from United Kingdom to U.S.A.
Quantity: Over 20 available
Stock Image
Secure Build Systems (Paperback)
Print on DemandSeller: CitiRetail, Stevenage, United Kingdom
Seller rating 5 out of 5 stars
Paperback. Condition: new. Paperback. "Secure Build Systems: Hardening CI, Runners, and Artifacts Against Tampering"Modern attackers don't need to breach production to ship malware-they only need to compromise your build. This book is written for experienced engineers, security practitioners, and platform teams responsible for CI/CD, release engineering, and software supply-chain risk. It provides an attacker-centric framework for reasoning about trust boundaries across repos, CI control planes, runners, and artifact stores, so hardening work is driven by evidence instead of folklore.You'll learn how to lock down pipeline definitions and release gates, design runner isolation and ephemerality, and eliminate secret sprawl by moving from long-lived keys to OIDC-based workload identity. The book goes deep on dependency integrity and hermetic inputs, then shows how to make integrity verifiable through provenance and attestations, SLSA-aligned requirements, and in-toto models for multi-step supply chains. Finally, it covers artifact signing strategies (including Sigstore keyless flows), transparency logs, registry immutability, and deploy-time policy-as-code verification gates-plus practical incident response patterns for CI compromise, trust resets, and artifact recall.Expect implementation-focused decision criteria, failure modes, and operational playbooks. Familiarity with CI/CD systems, cloud IAM, and container/package ecosystems is assumed; the emphasis is on building resilient, auditable, tamper-evident release pipelines at scale. This item is printed on demand. Shipping may be from our UK warehouse or from our Australian or US warehouses, depending on stock availability. Seller Inventory # 9798896653615
Buy New
US$ 43.30
US$ 49.40 shipping
Ships from United Kingdom to U.S.A.
Ships from United Kingdom to U.S.A.
Quantity: 1 available
Stock Image
Secure Build Systems : Hardening CI, Runners, and Artifacts Against Tampering
Print on DemandSeller: AHA-BUCH GmbH, Einbeck, Germany
Seller rating 5 out of 5 stars
Taschenbuch. Condition: Neu. nach der Bestellung gedruckt Neuware - Printed after ordering - 'Secure Build Systems: Hardening CI, Runners, and Artifacts Against Tampering'Modern attackers don't need to breach production to ship malware-they only need to compromise your build. This book is written for experienced engineers, security practitioners, and platform teams responsible for CI/CD, release engineering, and software supply-chain risk. It provides an attacker-centric framework for reasoning about trust boundaries across repos, CI control planes, runners, and artifact stores, so hardening work is driven by evidence instead of folklore.You'll learn how to lock down pipeline definitions and release gates, design runner isolation and ephemerality, and eliminate secret sprawl by moving from long-lived keys to OIDC-based workload identity. The book goes deep on dependency integrity and hermetic inputs, then shows how to make integrity verifiable through provenance and attestations, SLSA-aligned requirements, and in-toto models for multi-step supply chains. Finally, it covers artifact signing strategies (including Sigstore keyless flows), transparency logs, registry immutability, and deploy-time policy-as-code verification gates-plus practical incident response patterns for CI compromise, trust resets, and artifact recall.Expect implementation-focused decision criteria, failure modes, and operational playbooks. Familiarity with CI/CD systems, cloud IAM, and container/package ecosystems is assumed; the emphasis is on building resilient, auditable, tamper-evident release pipelines at scale. Seller Inventory # 9798896653615
Buy New
US$ 59.29
US$ 38.99 shipping
Ships from Germany to U.S.A.
Ships from Germany to U.S.A.
Quantity: 2 available
Seller Image
Secure Build Systems | Hardening CI, Runners, and Artifacts Against Tampering
Print on DemandSeller: preigu, Osnabrück, Germany
Seller rating 5 out of 5 stars
Taschenbuch. Condition: Neu. Secure Build Systems | Hardening CI, Runners, and Artifacts Against Tampering | Trex Team | Taschenbuch | Englisch | 2026 | NobleTrex Press | EAN 9798896653615 | Verantwortliche Person für die EU: Libri GmbH, Europaallee 1, 36244 Bad Hersfeld, gpsr[at]libri[dot]de | Anbieter: preigu Print on Demand. Seller Inventory # 138110687
Buy New
US$ 49.29
US$ 77.98 shipping
Ships from Germany to U.S.A.
Ships from Germany to U.S.A.
Quantity: 5 available