:_mod-docs-content-type: ASSEMBLY
[id="security-build"]
= Securing the build process
include::_attributes/common-attributes.adoc[]
:context: security-build

toc::[]

[role="_abstract"]
You can secure your software supply chain by using trusted base images, integrating security testing, and building once to deploy everywhere. Managing this build process ensures production deployments match verified builds and protects the software stack where code and libraries integrate.

// Build once, deploy everywhere
include::modules/security-build-once.adoc[leveloffset=+1]

// Build management and security
include::modules/security-build-management.adoc[leveloffset=+1]

// Securing inputs during builds
include::modules/security-build-inputs.adoc[leveloffset=+1]

// Designing your build process
include::modules/security-build-designing.adoc[leveloffset=+1]

// Knative builds
include::modules/security-build-knative.adoc[leveloffset=+1]

[id="additional-resources_security-build"]
[role="_additional-resources"]
== Additional resources

* xref:../../cicd/builds/understanding-image-builds.adoc#understanding-image-builds[Understanding image builds]
* xref:../../cicd/builds/triggering-builds-build-hooks.adoc#triggering-builds-build-hooks[Triggering and modifying builds]
* xref:../../cicd/builds/creating-build-inputs.adoc#creating-build-inputs[Creating build inputs]
* xref:../../cicd/builds/creating-build-inputs.adoc#builds-input-secrets-configmaps_creating-build-inputs[Input secrets and config maps]
ifndef::openshift-origin[]
// **This section is being moved, update the link once content is in.* add link here[The CI/CD methodology and practice]
* link:https://docs.openshift.com/serverless/1.28/about/about-serverless.html[OpenShift Serverless overview]
endif::[]
* xref:../../applications/odc-viewing-application-composition-using-topology-view.adoc#odc-viewing-application-composition-using-topology-view[Viewing application composition using the Topology view]
