Climbing the Production Mountain - Practical CI/CD Attacks Using CI/CD Goat

Explore practical CI/CD attacks using CI/CD Goat in this 47-minute conference talk from BSidesLV 2022. Delve into the intricacies of Continuous Integration and Continuous Deployment (CI/CD) security as presenters Omer Gil and Asaf Greenholts guide you through real-world attack scenarios. Learn how to identify vulnerabilities in CI/CD pipelines, understand common attack vectors, and discover effective mitigation strategies. Gain hands-on experience with CI/CD Goat, a purposefully vulnerable CI/CD environment designed for security testing and learning. Whether you're a security professional, developer, or DevOps engineer, acquire valuable insights to enhance your organization's CI/CD security posture and protect your production environments from potential threats.