Poisoned Pipeline / Mitigations / M1332

M1332

Implement least privilege principle for plugins

Limit the privileges and permissions of plugins used in the CI/CD pipeline to the minimum necessary to perform their intended functions.
Avoid using plugins with excessive or unnecessary privileges that could be exploited by attackers.

Applies to

• T0133 Vulnerable CICD plugins

References

• https://www.cyberark.com/what-is/least-privilege/