Security Methods for Agentless Infrastructure Manage Ment via Continuous Delivery Pipelines

Abstract

This article presents an analysis of security methods for agentless infrastructure management in the context of continuous delivery. The study is conducted as a structured analytical review and synthesis of academic publications focused on CI/CD security, software supply chain protection, infrastructure as code, policy management, and control automation. The main focus is placed on the relationship between delivery pipeline characteristics, risk distribution, threat detection mechanisms, and their impact on system resilience. Key sources of risk are examined, including code, configurations, dependencies, credentials, and the runtime environment, along with control parameters that determine the level of infrastructure security. It is established that risk in such systems is systemic in nature and emerges through transitions between stages rather than at isolated points. Existing approaches based on fragmented checks and static models are shown to lack continuity of control and to lose effectiveness in the absence of inter-stage connectivity. An original model is proposed, reflecting the transition from isolated protection mechanisms to a unified framework integrating telemetry, supply composition, behavioural data, and automated response. The article may be of interest to specialists in information security, DevSecOps, cloud technologies, and infrastructure management.