OWASP Top 10 CI/CD Security Risks
ID: d20ab618-ecfa-4b0c-860c-c7493f1d1b60
STIX ID: report--d20ab618-ecfa-4b0c-860c-c7493f1d1b60
Threat Score
65/100
Uploaded: 2026-08-20
Published Date: 2026-08-20
Last Modified Date: 2026-08-20
Created by: dogesec
TLP:CLEAR
ADMIRALTY:B2
PAP:CLEAR
...
...
A comprehensive guide enumerating the top 10 CI/CD security risks (e.g., insufficient flow control, insecure identity and access, dependency chain abuse, PPE, PBAC, credential hygiene, insecure configuration, ungoverned third-party services, artifact integrity, and logging/visibility), with definitions, impacts, mitigations, and real-world examples to help security teams secure modern CI/CD pipelines.