Poisoned Pipeline / Mitigations / M1320
M1320
Implement least privilege principle for containers
Follow the principle of least privilege by granting only the necessary permissions and privileges to container/runner agents based on their required functionality.
Avoid using privileged containers/runner agents unless absolutely necessary.
Applies to
- T0132 Overprivileged CI/CD Runners