Certification of computer pipeline results

A computer-implemented method, comprising:

• scanning, by a system operatively coupled to a processor, static code assets from a code repository to categorize source artifacts;
• generating, by the system, an artifact map that correlates categorized source artifacts to one or more security controls;
• identifying, by the system, a source artifact associated with a computer application;
• generating, by the system, an applicable security control profile by identifying at least one security control correlated to the source artifact via the artifact map;
• removing, by the system, an applicable security control from the applicable security control profile based on a dynamic parameter that defines a security compliance exception;
• and
• certifying, by the system, a result from an execution of a pipeline for the computer application based on a comparison of an implemented security control profile associated with the pipeline and the applicable security control profile associated with the computer application.

A computer program product for pipeline certification, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a processor to cause the processor to:

• scan, by the processor, static code assets from a code repository to categorize source artifacts;
• generate, by the processor, an artifact map that correlates categorized source artifacts to one or more security controls;
• identify, by the processor, a source artifact associated with a computer application, wherein the source artifact is one of multiple source artifacts associated with the computer application;
• generate, by the processor, an applicable security control profile by identifying at least one security control correlated to the source artifact via the artifact map, wherein the applicable security control profile comprises a plurality of security controls mapped to the multiple source artifacts;
• certify, by the processor, a result from an execution of a pipeline for a computer application based on a comparison of an implemented security control profile associated with the pipeline and an applicable security control profile identified from a source artifact associated with the computer application.