Ask HN: Any tools to secure the CI/CD pipeline?

1 points by bonfire 5 years ago · 0 comments · 1 min read

I want my devops to be focused elsewhere but on the other hand the CI/CD pipeline has permissions to access and do many things in very sensitive places. Specifically we use gitlab & jenkins. I know there are "best practices" documents for how to secure , but are there tools to monitor, offer compliance checks etc?

Thanks!