Poisoned Pipeline / Mitigations / M1730
M1730
Implement code reviews
Code reviews are a valuable tool for improving code quality, reducing technical debt, and ensuring the security and reliability of software applications.
Most crucial changes should be reviewed and validated to ensure there are no any security risks.
Code reviews can identify defects and vulnerabilities in the code before it's deployed, reducing the likelihood of security breaches, system failures, and other issues.
Require code reviews for any changes to source code or configuration files, especially for those affecting the CI/CD pipeline.
Applies to
- T0104 Discover coding flaws
- T0173 Auto merge rules in SCM
- T0115 Repojacking
- T0166 Trigger pipeline execution
- T0167 Recursive PR
- T0101 Discover technology stacks
- T0170 Malicious compiler or interpreter
- T0110 Advertise malicious artifact
- T0169 Push implants across repositories
- T0121 Compromised legitimate artifact
- T0217 Build trusted artifacts from an attacker-controlled source
- T0181 Malicious module injection
- T0191 Malicious code in artifacts
- T0111 Malicious code contribution to an open-source repository