Aqua Security, a pioneer in cloud-native security, is taking steps to prevent code tampering throughout the build and deployment process with real-time eBPF monitoring technology.

Aqua Security announced on the 15th that it has added pipeline integrity scanning to prevent software supply chain attacks and ensure the integrity of CI/CD (continuous integration/continuous deployment) pipelines.

Aqua's Pipeline Integrity Scanner, based on eBPF technology, detects and blocks suspicious behavior and malware in real time, prevents code tampering during the software build process, and responds to threats.

This industry-first solution empowers organizations to strategically disrupt the most aggressive supply chain threats that create a massive attack surface.

Aqua's pipeline integrity scanner detects suspicious behavior and malware characteristic of supply chain attacks.

This feature also detects zero-day threats based on active cloud-native attacks by leveraging behavioral signatures established by the Aqua Nautilus research team.

Developers can integrate pipeline integrity scanning into their build pipelines to monitor them and define baselines for build operations. It also detects any deviations from baseline and minimizes attack vectors. You can then set up warranty policies to block new builds from completing if any signs of suspicious activity are detected.

"This type of solution is the first of its kind for Aqua," said Jerby, CTO. "Other software supply chain security tools focus solely on code scanning or static analysis of build artifacts like software bills of materials (SBOMs). While important, these have proven insufficient to detect and stop these types of supply chain attacks."