Summary
In this chapter, we examined how to harden our build process to make it more secure, and how to implement the native capabilities of GitHub Advanced security to assess and address common coding security issues within a build pipeline. We discussed securing access to the build service and workers, protecting the build environment from malicious code, and implementing code and dependency scans.
In the next chapter, we will cover how to implement security in the test and release phases of DevSecOps, to build integrity into software release processes and to ensure that only code that passes key security criteria is released. See you there!
