info.md

Top 10 CI-CD Security Risks Information

• Lab Project

Classification

• Documentation

Audience

• Builder
• Breaker
• Defender

Downloads or Social Links

• Download

Code Repository

• GitHub

Top 10 CI/CD Security Risks

• Return to homepage
• CICD-SEC-1: Insufficient Flow Control Mechanisms
• CICD-SEC-2: Inadequate Identity and Access Management
• CICD-SEC-3: Dependency Chain Abuse
• CICD-SEC-4: Poisoned Pipeline Execution
• CICD-SEC-5: Insufficient PBAC
• CICD-SEC-6: Insufficient Credential Hygiene
• CICD-SEC-7: Insecure System Configuration
• CICD-SEC-8: Ungoverned Usage of 3rd Party Services
• CICD-SEC-9: Improper Artifact Integrity Validation
• CICD-SEC-10: Insufficient Logging and Visibility