Slide 28 of 38Sand & SignalOpen full tutorial

A misconfigured trigger can hand your secrets to a stranger's fork

Applies STRIDE to the CI/CD pipeline itself and walks the real 'pwn request' pattern in detail.

Raw HTML
← PreviousWhy attack a thousand customers when you can attack one build systemNext →A mutable version tag is a promise the maintainer can break