Tag
#CI/CD
5 published stories tagged with CI/CD.
Red Hat Cloud Services npm Compromise Shows How Trusted Frontend Packages Can Become A Build Pipeline Risk
Red Hat says a supply chain compromise affected multiple packages in the `@redhat-cloud-services` npm namespace after a compromised GitHub account pushed unauthorized commits.
Brief: Trivy supply chain attack targets CI/CD secrets
Dark Reading reported a Trivy-related supply-chain attack targeting CI/CD secrets. Pipeline secrets should be scoped, rotated, monitored, and protected from untrusted build steps.
Defender Guidance: Trivy supply chain attack targets CI/CD secrets
Dark Reading reported a Trivy-related supply-chain attack targeting CI/CD secrets. Pipeline secrets should be scoped, rotated, monitored, and protected from untrusted build steps.
Detection Notes: Trivy supply chain attack targets CI/CD secrets
Dark Reading reported a Trivy-related supply-chain attack targeting CI/CD secrets. Pipeline secrets should be scoped, rotated, monitored, and protected from untrusted build steps.
Risk Brief: Trivy supply chain attack targets CI/CD secrets
Dark Reading reported a Trivy-related supply-chain attack targeting CI/CD secrets. Pipeline secrets should be scoped, rotated, monitored, and protected from untrusted build steps.