Understanding the SLSA framework

Dip into the details of the SLSA framework and learn how it can protect you from security vulnerabilities and supply chain attacks.

Christian Nunciato

Buildkite maintains SOC 2 Type 2 compliance

Learn about Buildkite's renewed SOC 2 Type 2 certification for 2024, including expanded coverage for Buildkite Package Registries and Test Engine.

Jack Le

Accelerate secure software delivery with Lacework and Buildkite

Protect your software supply chain by integrating Lacework's security scanning into your Buildkite CI/CD pipelines. Try the new plugin today.

Michael Belton

Secure your CI/CD pipelines with clear boundaries

Learn how to protect your pipelines and infrastructure. Create and enforce security boundaries to prevent unsafe actions by your pipelines and agents.

Daniel Oakley

Session IP address pinning for dual-stack IPv6

After introducing session IP address pinning, we noticed dual-stack users need to re-authenticate too often. Learn what we found and our suggested fixes.

Steve Hoeksema

Local privilege escalation: Fixing security issues in the agent

Security hardening can be a depressing rabbit hole. Join us for a humorous, educational adventure in the quest towards a more secure Buildkite agent.

Josh Deprez

Continuous compliance and governance in CI/CD

Consider how security, compliance & governance might seamlessly work in CI/CD, and strike the right balance between efficiency and security.

Mel Kaulfuss

CI/CD best practices

Creating a CI/CD pipeline is only the first step. Optimizing it is the real journey, but there are best practices anyone can follow to improve their CI/CD maturity.

Mike Morgan

Applying SRE Principles to CI/CD

Slow, unreliable CI/CD? Learn how to use SLOs, SLIs, and Error Budgets to maintain focus, prioritize effort, and rebuild developer trust in CI/CD.

Mel Kaulfuss

Extending Buildkite with plugins: HashiCorp Vault

Learn how to customize and extend Buildkite CI/CD pipelines using plugins. We'll look at how to manage secrets in pipelines with HashiCorp Vault.

Michael Belton

Signed Git commits with Sigstore, Gitsign and OIDC

James Healy

Buildkite is now SOC 2 Type I compliant

Shaziya Bandukia