Pipeline Security
Pipeline Security applies Runtime Sensor policies to CI/CD builds to control file access, execution, networking, containers, and privileged operations.
Set Up Pipeline Security
- Deploy Team Server and install the Sensor on supported build infrastructure.
- Follow your CI/CD provider guide to discover pipelines and instrument builds.
- Derive and test a policy, assign it to the pipeline, then enable enforcement.
- Configure notifications for violations.
What Pipeline Security Protects
Policies can restrict credential and source reads, unapproved programs, unexpected network connections, container images and sockets, and privilege or resource abuse.
Start Here
| Question | Guide |
|---|---|
| How do discovery and runtime detection work together? | How It Works |
| Where should the Sensor run, and how should cleanup work? | Protect Builds |
| How do I instrument my platform? | CI/CD Providers |
| What do protection values mean? | Protection Status |