#CI/CD security

/en/articles/tag/ci-cd-security GigaTap article archive

GigaTap articles tagged CI/CD security.

Shai-Hulud Shows the Weak Link: Maintainer Trust - Sonatype says a new npm compromise wave abused trusted maintainer access and install-time hooks. The risk is not just bad packages, but stolen CI/CD secret