NIST SP 800-204D Software Supply Chain Security in DevSecOps CI/CD Pipelines
Section 5.1: Securing workflows in CI pipelines – NIST SP 800-204D Software Supply Chain Security in DevSecOps CI/CD Pipelines

NIST SP 800-204D Software Supply Chain Security in DevSecOps CI/CD Pipelines 5.1.4c: Check committed code for policy adherence and secrets, and enable push protection

What does 5.1.4c require?

Committed code is checked against organisational policy, which includes confirming that no secrets such as personal access tokens are present; detected secrets are shown prominently, for example on a security dashboard, and policy violations raise alerts with a documented method of resolution. Push protection is switched on across every repository an administrator is responsible for, and includes verification of developer identity and authorisation, enforcement of developer signing of commits, and file name verification.

Maintained by Gerard Blokdyk

Other controls in Section 5.1: Securing workflows in CI pipelines – NIST SP 800-204D Software Supply Chain Security in DevSecOps CI/CD Pipelines

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll NIST SP 800-204D Software Supply Chain Security in DevSecOps CI/CD Pipelines controls