Palo_Alto_Networks
CLOUDSEC-PRO · Question #164
Which two controls should be enforced in a secure CI/CD pipeline? (Choose two)
The correct answer is A. Code review before merge B. Automated static code analysis. Mandatory code reviews and automated static analysis detect issues early and reduce the chance of vulnerable code reaching production.
CI/CD Security and Supply Chain
Question
Which two controls should be enforced in a secure CI/CD pipeline? (Choose two)
Options
- ACode review before merge
- BAutomated static code analysis
- CUnlimited credential sharing
- DDisabling logs for speed
How the community answered
(69 responses)- A84% (58)
- C4% (3)
- D12% (8)
Explanation
Mandatory code reviews and automated static analysis detect issues early and reduce the chance of vulnerable code reaching production.
Topics
#CI/CD#code review#static analysis#secure pipeline
Community Discussion
No community discussion yet for this question.