Tag
#cicd
2 entries tagged "cicd".
-
August: Homologating SCA across orgs, a second production region, and grouping findings into work
Three threads from the month. Rolling a Black Duck reusable workflow across sibling GitHub orgs without an enterprise workflow, standing up a second production region next to the existing one, and turning scanner output into grouped, dismissable work instead of a pile of tickets.
-
July: Observation-mode SCA, a single-source audit plan, and capture that actually matches the session
Three threads from the month. Parameterizing a Black Duck reusable workflow so observation does not block CI, collapsing a SOC 2 vulnerability plan onto Jira as the only living source, and a QA capture spike that taught us video is the evidence when HAR is silent.