Poisoned Pipeline / Mitigations / M1830

M1830

Restrict token access

Restrict access to short-lived tokens to only authorized users and components.
This can be achieved by using access controls and permissions within the CI/CD system.

Applies to

• T0165 Create access token
• T0183 Harvesting short-lived token

References

None listed.