thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Advanced

OWASP Top 10 CI/CD Security Risks

An OWASP list of the ten most significant security risks in CI/CD environments.

Definition

Risks include insufficient flow control mechanisms, inadequate identity and access management, dependency chain abuse, poisoned pipeline execution, insufficient pipeline-based access controls, insufficient credential hygiene, insecure system configuration, ungoverned usage of third-party services, improper artifact integrity validation and insufficient logging and visibility.

Example

A review finds long-lived cloud keys in CI variables, mapping to Insufficient Credential Hygiene.

Exam tip

A useful checklist for DevSecOps pipeline hardening questions.

Related terms