CI/CD: Top 10 Security Risks
summary
A research-driven distillation of the top 10 security risks in CI/CD pipelines, derived by cross-referencing and analyzing high-profile breaches like CodeCov, SolarWinds, and PHP. The presenters identify common attack patterns and enumerate the most prevalent vulnerabilities in CI/CD environments.
AI-written summary · about
chapters (10)
- 0:00Introduction to CI/CD
- 1:05The evolving engineering ecosystem
- 5:302021: The year of CI/CD security
- 7:21Top 10 CI/CD security risks
- 10:33PHP git infrastructure breach
- 14:22Stack Overflow breach analysis
- 19:04Codecov environment variable leak
- 24:03Travis CI security flaw
- 27:35Dependency confusion attacks
- 30:16Securing the software chain
related talks
48mCI/CD Security
28mStandard Classification: Threat Modeling the CI/CD Pipeline to Improve Softwar...
26mTop 10 Challenges for DevSecOps
40mBest Practices for Securing CI/CD Pipelines or How to Get Security Right
45mDefending CI/CD against attacks
29mAbusing CI/CD - Top Ways to Reach Production
38mSecuring your CI/CD Pipeline
16mTime for a Check-Up of Your CI/CD Pipelines!