NIST SP 800-204D Software Supply Chain Security in DevSecOps CI/CD Pipelines
Section 5.1: Securing workflows in CI pipelines – NIST SP 800-204D Software Supply Chain Security in DevSecOps CI/CD Pipelines

NIST SP 800-204D Software Supply Chain Security in DevSecOps CI/CD Pipelines 5.1.2a: Run automated checks on every pushed change and tie requests to the developer's role

What does 5.1.2a require?

The project maintainer runs automated checks on all artifacts covered by a change being pushed or a pull request, (unit tests, lint, integrity and security checks among them), and each request a developer makes to a repository is consistent with that developer's assigned role (for example application updater or package manager). The platform that performs these operations is itself hardened, isolated and secure.

Maintained by Gerard Blokdyk

Other controls in Section 5.1: Securing workflows in CI pipelines – NIST SP 800-204D Software Supply Chain Security in DevSecOps CI/CD Pipelines

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll NIST SP 800-204D Software Supply Chain Security in DevSecOps CI/CD Pipelines controls