Managing Contractor Access to Google Cloud Build Without Leaking Secrets
Learn how to give freelancers and agencies the Google Cloud Build access they need for a project, keep secrets out of build logs, and remove that access when the work is done.
Posts tagged "ci/cd security"
Updated
How do I handle contractor access for ci/cd security?
Tempkey’s ci/cd security guides cover contractor access end to end: granting time-boxed access, keeping permissions least-privilege, and revoking and verifying access when an engagement ends, with the audit trail to prove it. Written for small teams that manage contractors without an IT department.
Seven Rules on How to Manage Contractor Access to CircleCI Securely
Discover how engineering leaders safely onboard and offboard external developers in CircleCI using context restrictions, OIDC tokens, and scheduled access teardowns.
Pipeline Security: Managing Contractor Access to GitHub Actions Without Leaking Secrets
Discover how lean engineering teams can grant external developers repository access while isolating production CI/CD workflows, protecting deployment keys, and enforcing clean offboarding.
Contractor-access playbooks in your inbox
Short, practical guides on granting, timing, and revoking contractor access — a few times a month. Unsubscribe anytime.