The OWASP Secure Pipeline Verification Standard (SPVS) (v1.0) is a framework of security requirements and controls that help teams design, build, and operate secure CI/CD pipelines. It provides a basis for verifying pipeline security controls and gives DevSecOps teams a list of requirements for secure delivery.
Essential baseline controls for organizations beginning their pipeline security journey.
Comprehensive security practices for mature development environments handling sensitive data.
Maximum security posture for critical infrastructure and high-risk systems.
| ID | Chapter | Section | Description | Level | References | |
|---|---|---|---|---|---|---|
| Loading data... | ||||||