NIST SP 800-204D Software Supply Chain Security in DevSecOps CI/CD Pipelines
Section 3: Software supply chain risk factors and mitigation measures – NIST SP 800-204D Software Supply Chain Security in DevSecOps CI/CD Pipelines

NIST SP 800-204D Software Supply Chain Security in DevSecOps CI/CD Pipelines 3.2.1d: Scan stored artifacts for new defects and be able to block their use in builds

What does 3.2.1d require?

Artifacts held in internal repositories are scanned on an ongoing basis for newly discovered or newly identified defects, and the repository can stop a flagged artifact from being used in builds according to the criticality of the finding, so that a vulnerability disclosed after an artifact was stored does not keep flowing into new builds.

Maintained by Gerard Blokdyk

Other controls in Section 3: Software supply chain risk factors and mitigation measures – NIST SP 800-204D Software Supply Chain Security in DevSecOps CI/CD Pipelines

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll NIST SP 800-204D Software Supply Chain Security in DevSecOps CI/CD Pipelines controls