NIST SP 800-204D Software Supply Chain Security in DevSecOps CI/CD Pipelines
Section 5.1: Securing workflows in CI pipelines – NIST SP 800-204D Software Supply Chain Security in DevSecOps CI/CD Pipelines

NIST SP 800-204D Software Supply Chain Security in DevSecOps CI/CD Pipelines 5.1.1a: Build on a hardened, isolated platform and gather evidence of isolation

What does 5.1.1a require?

The build platform's components (compiler, interpreter, build tools) are hardened, isolated and secured, and the first kind of evidence gathered from a build is the build system's own confirmation that the tools and processes ran in an isolated environment. The second kind is a hash of the finished artifact together with the files, libraries and other materials used and all events that occurred during the build.

Maintained by Gerard Blokdyk

Other controls in Section 5.1: Securing workflows in CI pipelines – NIST SP 800-204D Software Supply Chain Security in DevSecOps CI/CD Pipelines

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll NIST SP 800-204D Software Supply Chain Security in DevSecOps CI/CD Pipelines controls