security

We talked to Dama Damjanović, Principal Engineer at N26 about how the regulations in finance and banking affect engineering teams behind fintech apps, how they can improve security, and what type of new technology will add the most value to the industry in the coming years.

This post is intended to provide you with updates on the Log4j vulnerability (CVE-2021-44228) and its impact on Bitrise and its customers. Executive summary: Bitrise customers are not affected, but please check any 3rd party steps/code.

A guide to understanding the concept behind DevSecOps and how you can inject security into your mobile CI/CD pipeline to deliver more secure mobile applications.

We’ve just released (the first phase of) a new feature called Secret Envs filtering that enables managing secrets in a central location. Now you can set env vars as secrets from within your Workflows, mask them, and with a Script Step, use secrets from an external vault/company’s own service.

Bitriseは初となるSOC2 Type II 報告書を受領したことをここにご報告いたします。 これは厳格な監査を経て、Bitriseが業界の最高水準に準拠していることが検証され、顧客データのセキュリティに対する当社の取り組みが承認されました。

We’re proud to announce that we’ve received our first SOC 2 Type 2 report, meaning that a rigorous audit validated our compliance with the highest industry standards, confirming our commitment to the security of your data.

We talked to cybersecurity expert Anastasiia Voitova about all things related to mobile app security: from the first and most important steps teams should take to prevent potential attacks to reaching a high level of DevSecOps maturity.

We’re thrilled to announce another Verified Step focusing on the protection of your app: DexProtector, Licel’s product is now an official integration in the Bitrise Step Library, offering a unique solution to keep your apps as safe as possible.

We're announcing our new integration with Data Theorem's Mobile Secure product: the new Step will help you find vulnerabilities and data privacy issues within your iOS and Android applications on Bitrise.

With the new App-Ray Step, you can scan your apps for vulnerabilities such as security issues, privacy breaches, and potential data leaks. Available on Bitrise now.

John Turner from Bento for Business explains how to use GitHub's Deploy Keys feature and an SSH key to scope access from outside parties to a single repo, and limit that access to Read or Write.

We've introduced two new features: one to keep your secrets during PR builds, and one to enhance access control for Bitrise organization. Read the details.