Securing CI/CD for an open source project: Locking down dependencies (opens in new tab)

Part two This is the second post in a three-part series on how Cilium hardens its CI/CD pipeline. Part 1 covered access control: who can trigger builds and what code CI is allowed to execute. This...