CodeZine
Original published: Updated on DevPick:
CVE disclosures reach 10,000 per month: How is the Agency for Digital Transformation addressing security challenges in the era of frontier AI?
The Agency for Digital Transformation is providing a development platform that standardizes security checks in CI/CD pipelines, driven by the crisis that government procurement models cannot keep up with the speed of vulnerability disclosures.
Key points
- •The agency provides 'GCAS DevStack', a development platform built on GitLab on the government cloud.
- •Security checks integrated into CI/CD pipelines are applied by default in a way that repository owners cannot disable.
- •The background is the crisis that the government's procurement model of inspecting deliverables can no longer keep up with the speed of vulnerability disclosures.