Everything on DevOps Security

CI/CD pipelines are applications that require strict identity management and branch protection. Exfiltrated keys can be used to bypass security controls if pipeline identities have excessive privileges.

Impact: Prevents attackers from using compromised build keys to alter repository settings or release malicious code.

— from Black October: Securing CI/CD and AI Agents · The CTO Advisor· Nov 03, 2026