Poisoned Pipeline / Mitigations / M1322

M1322

Container or runner agent runtime security

Utilize container or runner agent runtime security solutions that can detect and prevent privilege escalation attempts in real-time, such as container runtime security tools, runtime security scanning, and container or runner agent security policies.

Applies to

• T0132 Overprivileged CI/CD Runners

References

• https://blog.qualys.com/product-tech/2020/11/03/built-in-runtime-security-for-containers