NEW350+ rooms now have a live terminal, so you can learn by typing the commands, right in your browser.Learn in a live terminal. 350+ rooms.Try a lab♥ Codelivly is 100% free, no paywall. If it helped you, chip in to keep it running.100% free. Help keep it so.Support us
[>_] ROOM · Cybersecurity
CI/CD Attack Surface
Master CI/CD pipeline threat modeling, runner security, and the prevention of secret leakage and workflow injection attacks.
Room tasks
1What Is the CI/CD Attack Surface and Why Does It Matter
2Poisoned Pipeline Execution and Script Injection
3Malicious Pull Requests from Forks
4Compromised Third-Party Actions and Plugins
5Guided Lab: Exploiting and Fixing a Vulnerable GitHub Actions Workflow
Frequently Asked Questions
What is the CI/CD attack surface?
It is every component an attacker can abuse in a delivery pipeline, including source repositories, build runners, secrets, third-party actions and deployment credentials. Mapping it is the first step in securing it.
What is poisoned pipeline execution?
It is an attack where someone modifies pipeline configuration or code that runs in the build, such as through a malicious pull request, to execute commands and steal secrets or tamper with artifacts.
How do I start threat modeling a pipeline?
Draw the flow from commit to deploy, mark trust boundaries and list what an attacker could change at each step. The CI/CD attack surface room on Codelivly is free and guides you through it.