Securing the CI/CD chain: secrets, OIDC, permissions, dependencies and signatures

Objective

Your pipeline has access to everything: the code, the production secrets, the image registry, sometimes the cluster. That makes it a target. This lesson reviews real attacks against CI/CD chains and the protections to put in place, from the simplest (no secret in clear text) to the most advanced (signed artifacts).