NIST SP 800-204D Software Supply Chain Security in DevSecOps CI/CD Pipelines
Section 5.2: Securing workflows in CD pipelines – NIST SP 800-204D Software Supply Chain Security in DevSecOps CI/CD Pipelines

NIST SP 800-204D Software Supply Chain Security in DevSecOps CI/CD Pipelines 5.2b: Scan deploy-ready code and repositories for secrets

What does 5.2b require?

When code sits in the repository ready for deployment, a security scanning step is run to find secrets (keys, access tokens and the like); in many cases the repository is scanned for secrets even before it is populated with code, since a secret found there may already have leaked.

Maintained by Gerard Blokdyk

Other controls in Section 5.2: Securing workflows in CD pipelines – NIST SP 800-204D Software Supply Chain Security in DevSecOps CI/CD Pipelines

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll NIST SP 800-204D Software Supply Chain Security in DevSecOps CI/CD Pipelines controls