25 Methods for Pipeline Attacks

Add Approver using Admin permission on CI

1. Unauthorized Approver Addition

In this scenario, an attacker with admin permissions on the CI pipeline adds an unauthorized user as an approver, potentially bypassing necessary security checks.

# Add unauthorized user as an approver
ci-tool add-approver --pipeline pipeline-name --user unauthorized-user

1. Exploiting We…