Code Security (CI/CD pipeline for vulnerabilities, malware, secrets)

Code Security (CI/CD pipeline for vulnerabilities, malware, secrets)

Trend Vision One Code Security is an advanced DevSecOps security solution by Trend Micro, designed to shift security left by embedding protection directly into the software development lifecycle.

LEARN MORE
  • Product Description

The solution automatically analyzes source code, dependencies, container images, and infrastructure-as-code (IaC) within CI/CD pipelines to detect vulnerabilities (CVEs), malware, and hard-coded secrets such as API keys, tokens, and credentials. This ensures risks are identified and remediated before reaching production.

Trend Vision One Code Security integrates seamlessly with popular CI/CD and source control platforms including GitHub, GitLab, Bitbucket, Jenkins, and Azure DevOps. As part of the CNAPP (Cloud-Native Application Protection Platform) approach, it correlates code-level risks with container, workload, and cloud posture insights to deliver risk-based prioritization and actionable remediation guidance.

Key Features

  • Automated security scanning within CI/CD pipelines

  • Vulnerability (CVE) detection in source code and dependencies

  • Malware and software supply-chain risk detection

  • Detection of hard-coded secrets (API keys, tokens, credentials)

  • DevSecOps and shift-left security enablement

  • Unified visibility through Trend Vision One CNAPP & XDR

WhatsApp