# Strengthening CI/CD Environments: Insights from NSA and DHS CISA guidance

DevFeed: [Strengthening CI/CD Environments: Insights from NSA and DHS CISA guidance](<https://devfeed.tech/articles/strengthening-ci-cd-environments-insights-from-nsa-and-dhs-cisa-guidance-13241.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/strengthening-ci-cd-environments-insights-from-nsa-and-dhs-cisa-guidance>)

Published: 2023-06-30T00:00:00Z

Content type: opinion

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [CI/CD](<https://devfeed.tech/topics/cicd.md>), [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>), [DevSecOps](<https://devfeed.tech/topics/devsecops.md>), [Cybersecurity](<https://devfeed.tech/topics/cybersecurity.md>), [cisa](<https://devfeed.tech/topics/cisa.md>)

Tags: [chainguard-images](<https://devfeed.tech/tags/chainguard-images.md>), [ci-cd](<https://devfeed.tech/tags/ci-cd.md>), [cicd](<https://devfeed.tech/tags/cicd.md>), [cisa](<https://devfeed.tech/tags/cisa.md>), [continuous-verification](<https://devfeed.tech/tags/continuous-verification.md>), [cybersecurity](<https://devfeed.tech/tags/cybersecurity.md>), [devsecops](<https://devfeed.tech/tags/devsecops.md>), [secure-software-development-frameworks](<https://devfeed.tech/tags/secure-software-development-frameworks.md>), [security](<https://devfeed.tech/tags/security.md>), [sigstore](<https://devfeed.tech/tags/sigstore.md>), [slsa](<https://devfeed.tech/tags/slsa.md>), [software-supply-chain](<https://devfeed.tech/tags/software-supply-chain.md>), [software-supply-chain-security](<https://devfeed.tech/tags/software-supply-chain-security.md>), [ssdf](<https://devfeed.tech/tags/ssdf.md>)

## AI overview

This commentary explains NSA and DHS CISA guidance for securing CI/CD environments. It highlights risks to downstream environments and software consumers, including compromised developer credentials and application libraries, and recommends established software supply chain security frameworks such as SLSA and CNCF best practices.

## Source excerpt

Fortify your CI/CD environments with insights from NSA and DHS CISA guidance, presented by Chainguard.