Build Controls on Kosli's Software Development Lifecycle https://sdlc.kosli.com/controls/build/ Recent content in Build Controls on Kosli's Software Development Lifecycle Hugo en-us Version Control https://sdlc.kosli.com/controls/build/versioncontrol/ Mon, 01 Jan 0001 00:00:00 +0000 https://sdlc.kosli.com/controls/build/versioncontrol/ Software and configuration are stored in an approved version control system, providing traceability of all changes across all releases. Artifact Binary Provenance https://sdlc.kosli.com/controls/build/binary_provenance/ Mon, 01 Jan 0001 00:00:00 +0000 https://sdlc.kosli.com/controls/build/binary_provenance/ Every software artefact running in a production system has known provenance, established through cryptographic content-addressable identities. Controlled Build Environment https://sdlc.kosli.com/controls/build/toolchain/ Mon, 01 Jan 0001 00:00:00 +0000 https://sdlc.kosli.com/controls/build/toolchain/ Build environments are defined as code, ephemeral, and auditable, providing resilience against supply chain attacks. Dependency Management https://sdlc.kosli.com/controls/build/dependencies/ Mon, 01 Jan 0001 00:00:00 +0000 https://sdlc.kosli.com/controls/build/dependencies/ Every dependency is defined securely, managed, and auditable as part of the software development lifecycle. Infrastructure and Configuration as Code https://sdlc.kosli.com/controls/build/infrastructure_and_config_management/ Mon, 01 Jan 0001 00:00:00 +0000 https://sdlc.kosli.com/controls/build/infrastructure_and_config_management/ Infrastructure and configurations are defined as code, stored in version control, and applied through automation to ensure auditability and reproducibility. Secrets Scanning https://sdlc.kosli.com/controls/build/secrets-scanning/ Mon, 01 Jan 0001 00:00:00 +0000 https://sdlc.kosli.com/controls/build/secrets-scanning/ Source code, built binaries, and configuration files are scanned for secrets at multiple stages of the development lifecycle to prevent credential exposure.