Sabbir M. Saleh

A Stage-Aware Tool for Modelling and Verifying CI/CD Security Evidence

Continuous integration and continuous deployment pipelines produce security-relevant records across source, build, test, package, deployment, and runtime environments. However, these records remain fragmented across logs, scanner findings, policy decisions, identity events, artefact metadata, and runtime alerts, limiti...