DevOps Attack

Continuous delivery tool

http://www.jamesbowman.me/post/continuous-delivery-tool-landscape/

CI/CD 威胁矩阵

https://github.com/rung/threat-matrix-cicd

参考资料

KCon 2023 CICD攻击场景 https://github.com/knownsec/KCon/blob/master/2023/CICD%E6%94%BB%E5%87%BB%E5%9C%BA%E6%99%AF.pdf