D12.1 - SIESTA secure DevOps processes
Year: 2026
Type: conference-abstract
Abstract: This document consolidates the final documentation for SIESTA WP12 Security Hardening, also known as Secure DevOps processes, within EOSC SIESTA Horizon. It presents the work as a coherent programme report with traceability between requested capabilities, delivered implementation assets, and practical adoption paths. The evidence shows that WP12 progressed from conceptual security-hardening goals to deployable, repeatable, and auditable technical controls across CI/CD, Kubernetes admission policy, software supply-chain integrity, and platform observability. The core achievement is ecosystem-level integration. Instead of isolated components, the WP 12 delivered interoperable controls: GitLab pipeline components for build/sign/verify/deploy container images, Gatekeeper policy libraries with validation gates, hardened cluster runbooks for repeatable cluster deployment, and operational dashboards with role-aware secure access patterns. This enables secure-by-default onboarding for teams and provides program governance with practical evidence of implementation maturity. In short, WP12 delivered both technology and operating methods. The technology includes policy engines, registries, analysis tools, and network controls. The operatingmethod includes branch governance, validation chains, deployment sequencing, auditability, and structured documentation. Together, these outputs form a usable baseline for continued scaling of secure workloads and secure DevOps processes within EOSC SIESTA.
Institution: InterWay (Slovakia)
Language: English
Subfield: Information Systems
Field: Computer Science
Domain: Physical Sciences
Open Access status: green
Funder: European Commission
OpenAlex ID: W7214980102