Comment on Exploiting CI / CD Pipelines for fun and profitparentComments−zettabomb2yWith Bitbucket, as well as Gitlab and likely others that I haven't used, the CI pipelines are stored as a plaintext configuration in the repo itself. So, repo commit access automatically gives you the ability to modify the pipeline.−lost_womble2yThis is why things like codeowners files are so important
Comments
With Bitbucket, as well as Gitlab and likely others that I haven't used, the CI pipelines are stored as a plaintext configuration in the repo itself. So, repo commit access automatically gives you the ability to modify the pipeline.
This is why things like codeowners files are so important