---
title: "Discussion on \"Your CI/CD Pipeline Is the Easiest Way Into Your Repo (And Nobody's Checking It)\" | Hashnode"
description: "Discussion on \"Your CI/CD Pipeline Is the Easiest Way Into Your Repo (And Nobody's Checking It)\". Your code gets reviewed. Your dependencies get scanned. But your CI/CD pipeline — the thing with access to your secrets, your deployments, and your production credentials — usually gets copy-pasted fr"
url: "https://hashnode.com/posts/your-ci-cd-pipeline-is-the-easiest-way-into-your-repo-and-nobody-s-checking-it/6af4b173577c87e513370c68"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Your CI/CD Pipeline Is the Easiest Way Into Your Repo (And Nobody's Checking It)](https://parasraju.hashnode.dev/your-ci-cd-pipeline-is-the-easiest-way-into-your-repo-and-nobody-s-checking-it?utm_source=hashnode&utm_medium=feed)

Your code gets reviewed. Your dependencies get scanned. But your CI/CD pipeline — the thing with access to your secrets, your deployments, and your production credentials — usually gets copy-pasted fr

6h ago · 4 min read · parasraju.hashnode.dev  
Read the article

-   [#security](https://hashnode.com/tag/security)
-   [#devops](https://hashnode.com/tag/devops)
-   [#cicd-cjy1vtdk2005kjjs17n8couc3](https://hashnode.com/tag/cicd-cjy1vtdk2005kjjs17n8couc3)
-   [#opensource](https://hashnode.com/tag/opensource)

## Written by

[Paras](https://hashnode.com/@parasraju)

@parasraju · Amritsar, Punjab, India

  
[View profile](https://hashnode.com/@parasraju)

3rd-year CSE student at GNDU Amritsar. Building open-source dev tools. Shipping 5 npm packages to 10k downloads.

## Responses

Markdown supported · ⌘↵ to post

No responses yet.