SecDocker：强化持续集成工作流
SecDocker: Hardening the Continuous Integration Workflow
摘要：
当前的持续集成流程面临着重大的内在网络安全挑战。这个想法不仅是为了解决和测试源代码的正式或监管安全需求，而且还要坚持CI管道本身的相同原则。本文介绍了当前CI工作流中的安全问题的概述。它设计、开发和部署了一个新工具，用于安全部署基于容器的CI管道流，而不会减慢发布周期。该工具因其基于Docker的方法而被称为\SD，可在GitHub中公开使用。它基于配置机制实现了透明的应用程序防火墙，避免了CI工作流中与预期或非预期容器配置相关的问题。它与其他DevOps Engineers工具集成，仅提供来自匹配特定模式的场景的反馈，解决未来的容器安全问题。
英文摘要：
Current Continuous Integration processes face significant intrinsic cybersecurity challenges. The idea is not only to solve and test formal or regulatory security requirements of source code but also to adhere to the same principles to the CI pipeline itself. This paper presents an overview of current security issues in CI workflow. It designs, develops, and deploys a new tool for the secure deployment of a container-based CI pipeline flow without slowing down release cycles. The tool, called \SD for its Docker-based approach, is publicly available in GitHub. It implements a transparent application firewall based on a configuration mechanism avoiding issues in the CI workflow associated with intended or unintended container configurations. Integrated with other DevOps Engineers tools, it provides feedback from only those scenarios that match specific patterns, addressing future container security issues.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
