Loading
Zero-trust delivery pipeline
Signed artifacts, policy gates, and environment promotion that treats every stage as untrusted until proven.
Problem
Teams could deploy quickly, but promotion paths trusted developer machines and shared credentials.
Context
Anonymized product organization consolidating CI/CD across multiple cloud accounts.
Architecture
OIDC to cloud, short-lived credentials, signed container images, admission policies, and staged promotion with evidence packs.
Engineering challenge
Keeping developer velocity while removing standing cloud credentials and unverified images.
Security considerations
Least privilege roles, secret scanning, SBOM attachment, and break-glass procedures.
Implementation
Pilot on two services, then organization-wide golden-path templates with mandatory policy checks.
Results
Standing cloud keys removed from CI and promotion became auditable for enterprise customer reviews.
Lessons learned
Zero trust in delivery is mostly identity and evidence, not another scanner brand.
Technology
- GitHub Actions
- OIDC
- Sigstore
- Kubernetes
- Terraform