What Is Build-Time Security for CI/CD Pipelines?
TL;DR A CI/CD pipeline is privileged, networked, and often executes third-party packages, scripts, actions, containers, or build tools as software is assembled. Traditional AppSec tools such as SAST, SCA, and DAST help secure source code, dependencies, and deployed applications, but they do not fully monitor or control what happens while the build itself is running. […]
Build-Time Security: The Missing Layer in Application Security
TL;DR AppSec tools cover code (SAST), dependencies (SCA), and deployed applications (DAST), but most do not monitor and enforce policy on live build execution, the phase where secrets are available, egress is open, and dependencies execute. Recent attacks involving Axios, TeamPCP, and the Bitwarden CLI npm compromise show how attackers exploit this blind spot. Build-time […]
InvisiRisk Expands Build Application Firewall with Encoded Secret Detection and Hardened CI/CD Integration
Latest release (v1.1.38) delivers real-time encoded secret interception, deep dependency intelligence, and expanded GitHub Actions support Houston, TX, April 21, 2026 – InvisiRisk, which released the industry’s first Build Application Firewall (BAF) in 2025, today announced a major platform update that strengthens real-time protection of CI/CD pipelines against encoded credential exfiltration, supply-chain compromise, and dependency […]
Why Traditional DevOps Security Tools Miss CI/CD Pipeline Attacks
Why Traditional DevOps Security Tools Miss CI/CD Pipeline Attacks by Tom Hamilton, CTO and Co-Founder, InvisiRisk, Inc. Key Takeaways: The uncomfortable truth is that a CI/CD pipeline can look secure on paper and still leak secrets or produce compromised builds in practice. Scanners are excellent at finding known issues in source code, open-source dependencies, and […]
Why the AWS CodeBreach Vulnerability Is a Reminder We Can’t Ignore
AWS CodeBreach Vulnerability: The High Cost of Unknown Risks in Your Build Pipeline The AWS CodeBreach vulnerability, reported last week by Wiz Research, exposed a flaw in AWS CodeBuild that allowed unauthenticated attackers to infiltrate the build environment, leak privileged credentials, and potentially put every AWS account at risk. This serves as a stark reminder […]
InvisiRisk Unveils Groundbreaking Build Security AI Agent
InvisiRisk Launches Revolutionary Build Security AI Agent for Software Supply Chain Protection InvisiRisk, Inc. is excited to announce the launch of its revolutionary Build Security AI Agent, designed to transform the security landscape of software supply chains. This innovative solution leverages advanced artificial intelligence to provide unparalleled protection for CI/CD pipelines, ensuring the integrity and […]
CI/CD Secrets Leaks: The Runtime Blind Spot in Build Security
Why Your Secrets Faucet Is Still Leaking: The Runtime Blind Spot in CI/CD Security We all know the nightmare scenario: sensitive credentials – API keys, database passwords, private certificates – leaked into the wild. Diligent teams implement a comprehensive strategy: secure storage with secret managers (like Vault or AWS Secrets Manager), static code scanning on […]
Don’t Let a Typo Sink Your Ship: Typosquatting Prevention Strategies
Don’t Let a Typo Sink Your Ship: Typosquatting Attacks and How InvisiRisk BAF Stops Them In today’s fast-paced software development world, efficiency is king. Developers often rely on vast ecosystems of open-source packages to build and enhance their applications. But within this convenience lies a hidden danger: typosquatting. This insidious attack method, where malicious actors […]
Could InvisiRisk Security Attestations Have Prevented the NHS Breach?
NHS IT Provider Hit with £3m ICO Fine: A Supply Chain Security Wake-Up Call The recent ICO fine levied against an NHS IT provider, Advanced Computer Software Group Ltd (ACSGL), serves as a stark reminder of the critical importance of robust supply chain security. The root cause? A ransomware attack exploiting security vulnerabilities, specifically the […]
Ensuring Software Supply Chain Security with Blessed Repositories
Why Blessed Open-Source Repositories Matter In today’s rapidly evolving technological landscape, the importance of maintaining a secure and reliable software supply chain cannot be overstated. One critical aspect of this is the use of “blessed open-source repositories,” which serve as trusted sources for open-source components. These repositories are meticulously curated and approved by DevSecOps teams […]