Elad Pticha and Oreen Livni: Why Your CI/CD Pipeline Is Vulnerable — and It’s Not Your Fault https://peertube.eqver.se/videos/watch/397b82c1-8b2a-4278-a873-d99602f7d006 A DEF CON 32 talk exploring how a single command injection vulnerability in a CI/CD component can put a major open-source project at risk — demonstrated through Bazel and a GitHub Action case study. The speakers show how even “secure” pipelines can be compromised, demonstrate real attack scenarios, and explain how threat actors can inject malicious code into widely used repositories. Fri, 24 Jul 2026 11:25:46 GMT https://validator.w3.org/feed/docs/rss2.html PeerTube - https://peertube.eqver.se Elad Pticha and Oreen Livni: Why Your CI/CD Pipeline Is Vulnerable — and It’s Not Your Fault https://peertube.eqver.se/client/assets/images/icons/icon-512x512.png https://peertube.eqver.se/videos/watch/397b82c1-8b2a-4278-a873-d99602f7d006 All rights reserved, unless otherwise specified in the terms specified at https://peertube.eqver.se/about and potential licenses granted by each content's rightholder.