What Strategies for the Integration of Software Supply Chain Security in DevSecOps CI/CD pipelines requires
This NIST Special Publication provides actionable strategies to integrate software supply chain (SSC) security into DevSecOps CI/CD pipelines for cloud-native applications, focusing on source code integrity, artifact provenance, and deployment verification. Key requirements are outlined in sections addressing SLSA framework alignment, SBOM generation, and attestation workflows.
Pillar: Cloud & SaaS · Authority: National Institute of Standards and Technology (NIST) · Version: 1.0.0 · Last updated:
Primary source: https://csrc.nist.gov/pubs/sp/800/204/d/ipd
SHA-256 integrity: 4f49505fcc4dd977539b35c9f993a87d0dbdd194e5263a921ae98c773adbea39
Primary Citations — 5 traced to source
- NIST SP 800-204D, https://csrc.nist.gov/pubs/sp/800/204/d/ipd, Section on Source Code Management Controls, 2023
- NIST SP 800-204D, https://csrc.nist.gov/pubs/sp/800/204/d/ipd, Section on Build Environment Integrity, 2023
+ 3 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
- Discovery (free): /api/v1/nodes/nist-sp-800-204d-cicd-pipeline-security.json — 6-field metadata
- Vault (full node): /api/v1/vault/nodes/nist-sp-800-204d-cicd-pipeline-security.json — full 13-key payload, $0.01 USDC (L402/Skyfire/Direct Base)
- Canonical URL: https://bidda.com/intelligence/nist-sp-800-204d-cicd-pipeline-security
- Back to registry: Browse all 10,090 compliance nodes