# CI/CD Pipeline Security

> Master the security of CI/CD pipelines. Learn to prevent pipeline poisoning, secure secrets, and protect the software supply chain from injection attacks.

Canonical: https://codelivly.com/rooms/cicd-pipeline-security
Last updated: 2026-09-25

| | |
|---|---|
| Level | Advanced |
| Category | Cloud Security |
| Lessons | 3 |
| Estimated time | 30 min |
| XP | 100 |

This advanced module dives deep into securing Continuous Integration and Continuous Deployment (CI/CD) pipelines, the critical nerve center of modern DevSecOps. You will learn to identify and mitigate pipeline-specific attack vectors, including pipeline poisoning, dependency confusion, and runner hijacking. The curriculum covers securing secrets management, implementing artifact signing, protecting build environments, and defending the software supply chain against sophisticated injection attacks. By mastering these concepts, you will ensure that the automated path from code commit to cloud deployment remains uncompromised.

## Lessons

1. What Is CI/CD Security and Why Does It Matter (30 min)
2. Common Pipeline Attack Vectors (Secrets Leakage, Poisoned Dependencies) (30 min)
3. Guided Lab: Hardening a CI/CD Pipeline (30 min)

## Related

- [Learning path: Infrastructure as Code and DevSecOps](https://codelivly.com/learning-paths/infrastructure-as-code-and-devsecops)
- [All rooms](https://codelivly.com/rooms)