ReleaseBytes
gcp Google Cloud Blog ·

Google Cloud Strengthens CI/CD Security with New Source Manager Capabilities

blogsecuritygcpgaengineergovernment
feature

Google Cloud Secure Source Manager (SSM) introduces two new generally available capabilities to enhance software supply chain security. These features aim to prevent unauthorized access to CI/CD systems and unauthorized code changes by authorized users. The update is critical for organizations looking to mitigate supply chain threats and secure development workflows. It impacts engineers and architects responsible for managing source code and CI/CD pipelines on Google Cloud.

  • →Granular Code Ownership and Pull Request Approvals
  • →Secure CI/CD System Integration with Developer Connect
Features (2) ›
  • Granular Code Ownership and Pull Request Approvals

    The new Code Owners system allows for managing pull request approver sets at a per-file and per-branch level, providing more granular identity and access management. It supports nestable CODEOWNERS files and independent approval sections, enabling multiple departments to require sign-offs for a single pull request.

  • Secure CI/CD System Integration with Developer Connect

    SSM's new Developer Connect integration facilitates secure connection of CI/CD systems and runtimes, even across different private networks. This private CI/CD blueprint architecture leverages Private Service Connect and VPC Service Controls to limit access to proxy endpoints, ensuring defense-in-depth.

Read the original announcement →

https://cloud.google.com/blog/products/identity-security/strengthen-your-cicd-pipeline-with-new-secure-source-manager-capabilities/

Related releases