Poisoned pipelines: Security researcher explores attack methods in CI environments

A security researcher has described how abusing permissions in source code management (SCM) repositories can lead to CI poisoning, also known as ‘poisoned pipeline attacks’.