Poisoned Pipeline / Mitigations / M1321

M1321

Container or runner hardening

Apply security best practices for hardening container or runner agent images, configurations, and host systems, including regular patching and updates, disabling unnecessary services and components, and implementing strong authentication and access controls.

Applies to

• T0132 Overprivileged CI/CD Runners

References

• https://github.com/step-security/harden-runner
• https://docs.gitlab.com/runner/security/