Conduct plugin security review

Conduct thorough security reviews of plugins before incorporating them into the CI/CD pipeline.
Evaluate the reputation, reliability, and security history of plugins, and choose only those that are well-maintained, regularly updated, and have a good track record of security.

Applies to

T0133 Vulnerable CICD plugins

References

None listed.