NEW350+ rooms now have a live terminal, so you can learn by typing the commands, right in your browser.Learn in a live terminal. 350+ rooms.Try a lab♥ Codelivly is 100% free, no paywall. If it helped you, chip in to keep it running.100% free. Help keep it so.Support us
[>_] ROOM · Cloud Security
CI/CD Pipeline Security
Master the security of CI/CD pipelines. Learn to prevent pipeline poisoning, secure secrets, and protect the software supply chain from injection attacks.
Pipelines build and deploy code with powerful credentials. If attackers compromise them, they can inject malicious code or steal secrets, affecting every system the pipeline later touches or deploys to.
What is pipeline poisoning?
It is modifying pipeline configuration or inputs, such as workflow files or build scripts, so malicious steps run during a build. Pull requests from untrusted sources are a common vector.
How can secrets be protected in pipelines?
Use the platform's secret store, scope tokens narrowly, prefer short-lived credentials and avoid printing secrets in logs. This advanced Codelivly room is free and covers these defenses.