Pipeline Security and Supply Chain Risk: Closing the Gap Between AppSec and CloudSec

Working in cloud security, I spend a lot of time thinking about the seams between systems: the places where one team's security coverage ends and another's begins. The gap I keep coming back to is CI/