LIVING OFF THE PIPELINE

Summary from the TLDR InfoSec newsletter

The Living Off the Pipeline project is an inventory of how development tools commonly run in CI/CD pipelines can be leveraged to achieve code execution by running on untrusted code changes or via workflow injection.