PROJECT-JTH Insights
Clear Thinking.
Practical Next Steps.
Explore ideas from Jesse Hart on building better systems, leading under pressure, and turning complex work into useful action.
Technology & AutomationLeadership & CommunicationSoftware & Practical Tools
DevOps for Compliance: SBOMs & Signed Artifacts for U.S. Regulated Orgs
by: Jesse HartPublished on: 07/10/2026Map NIST SSDF and FedRAMP to CI/CD and IaC controls. Build audit ready pipelines that output SBOMs, signed artifacts, and immutable CI logs.
devops for compliancedevsecops complianceci cd compliancecompliance as codedevops compliance toolscompliance automation devopsdevops security practicescontinuous compliance devopsdevops regulationsbest practices for devops compliancecompliance issues in devopsdevops compliance checklisthow devops enhances compliancedevops for regulatory requirementsdevops compliance frameworks
Put It Into Practice
Find Your Next Clear Step.
Need help with a technical challenge or a leadership event? Tell Jesse what you are working through and start a practical conversation.