Current Continuous Integration processes face significant intrinsic cybersecurity challenges. The idea is not only to solve and test formal or regulatory security requirements of source code but also to adhere to the same principles to the CI pipeline itself. This paper presents an overview of current security issues in CI workflow. It designs, develops, and deploys a new tool for the secure deployment of a container-based CI pipeline flow without slowing down release cycles. The tool, called \SD for its Docker-based approach, is publicly available in GitHub. It implements a transparent application firewall based on a configuration mechanism avoiding issues in the CI workflow associated with intended or unintended container configurations. Integrated with other DevOps Engineers tools, it provides feedback from only those scenarios that match specific patterns, addressing future container security issues.

翻译：目前的连续一体化进程面临巨大的内在网络安全挑战,其理念不仅在于解决和测试源代码的正式或监管安全要求,而且要遵守CI编审中程序本身的相同原则,本文件概述了CI工作流程中当前的安全问题,设计、开发和部署一个新的工具,安全部署集装箱基代码管道流量,而不会减缓释放周期。GitHub公开使用该工具,称为\SD,其基于Docker的方法。它基于一个配置机制,在CI工作流程中避免与预期或意外集装箱配置有关的问题,实施透明的应用防火墙。它与其他DevOps工程师工具相结合,仅提供符合特定模式的反馈,解决未来集装箱安全问题。