Poisoned Pipeline Execution Attacks: A Look at CI-CD Environments

Published

2024-03-19 00:00

Collected

2026-07-08 00:15

---
id: 3923
title: "Poisoned Pipeline Execution Attacks: A Look at CI-CD Environments"
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/poisoned-pipeline-attack-execution-a-look-at-ci-cd-environments"
published_at: "2024-03-19T00:00:00Z"
tags: ["rce", "supply-chain", "devops", "ci-cd-security", "poisoned-pipeline-execution"]
phying_url: "https://phying.com/item/3923"
lang: en
---

# Poisoned Pipeline Execution Attacks: A Look at CI-CD Environments

## Summary

Bishop Fox examines the three types of poisoned pipeline execution (PPE) attacks, showing how attackers inject code into CI/CD build pipelines to reach production, plus prevention guidance.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **Published:** 2024-03-19T00:00:00Z
- **Original:** https://bishopfox.com/blog/poisoned-pipeline-attack-execution-a-look-at-ci-cd-environments
- **Phying News:** https://phying.com/item/3923