Poisoned Pipeline / Mitigations / M1110
M1110
Implement contributor validation
Verify the identity and trustworthiness of code contributors before accepting their code contributions to the open-source repository.
This can include validating their identity, reputation, and previous contributions, and using a well-defined process for onboarding new contributors to ensure that they are legitimate and not malicious actors.
Applies to
- T0111 Malicious code contribution to an open-source repository
- T0213 Orchestrate AI-agent fleet as the intrusion workforce