GITLAB_CI

Quick learn: What is CI/CD Security? Strategies to strengthen your pipelines against attack

by

Short weekly tech update video (6:06 minutes).This week:CI/CD pipelines streamline the process of pushing code to production. Lot of the recent breaches have included attackers directly attacking either the CI/CD software providers (CircleCI or Teamcity breach) and/or have breached the CI/CDs of organisations to either push in a backdoor(Solarwinds, Codecov) or exfiltrate sensitive information.

[GITLAB RUNNER – self hosted] Fix for Docker in Docker (DinD)

by
CI Job failed

1.2 The self hosted Gitlab runner (executable on Linux VM) is not configured properly to use DinD Source: https://docs.gitlab.com/ee/ci/docker/using_docker_build.html#use-docker-in-docker 2.3 THIS SOLUTION IS POTENTIALLY UNSAFE – ALTERNATIVE Alternative is to use kaniko to create the docker image. kaniko solves two problems with using the Docker-in-Docker build method: * Docker-in-Docker requires privileged mode to function, which … Read more