Security Control Center for DevSecOps
The Security Control Center provides you with a set of tools to secure your project. The tools are designed to be used in a DevOps environment and are integrated into your CI/CD pipeline. The Workflow is based on proven security practices and is designed to be easy to use.
Development
Secure Coding Guidelines
Produce secure code by following secure coding guidelines.
In-Toto Provenance
Prove the integrity of the software supply chain. Creates a post-commit hook that records the file hashes of the project.
Continous Integration
Integrate a whole DevSecOps-Pipeline with a single Workflow
Integrate each part of the Pipeline Step-by-Step
1
Create a Personal Access Token
To use the Devguard-Scanner, you need to create a Personal Access Token. You can create such a token by clicking the button below.
2
Store the Token in your CI/CD Variables
To use the DevGuard-Scanner in your CI/CD pipeline, you need to store the token in your CI/CD variables. The token is used to authenticate the scanner with the DevGuard API: GitLab Documentation, GitHub Documentation
3
Integrate the DevGuard-Scanner
GitLab
GitHub
Operations
Image Verification
Ensure the integrity and authenticity of your container images.