Term Kind Topic What it is
CI Secret Exposure Surface Build Credential Blast Radius, Runner Secret Surface concept Supply Chain Security The set of credentials reachable by any code that executes in a build job, which is usually far larger than the job needs and is exposed in full by a single compromised step.
Dependency Confusion Internal Package Name Hijack, Registry Resolution Confusion concept Supply Chain Security A build resolving an internal package name from a public registry because the package manager prefers the highest version across all configured sources - an anti-pattern in resolution configuration rather than…