CI/CD pipelines security-critical हैं — उनके पास source code, credentials, और production deployment तक पहुँच होती है। एक compromised pipeline विनाशकारी हो सकती है (supply chain attacks)। Pipelines को secure करने में secrets, pipeline स्वयं, dependencies, और उत्पन्न artifacts की सुरक्षा शामिल है।
pipeline security क्यों महत्वपूर्ण है
Pipelines are a HIGH-VALUE TARGET — they have powerful access:
→ SOURCE CODE, deployment CREDENTIALS, production ACCESS, secrets
→ a compromised pipeline can inject malicious code into your software (SUPPLY CHAIN
ATTACK — affecting all your users) or steal credentials/deploy malicious versions
→ Real, serious attacks (SolarWinds, etc.) targeted build/CI systems.
