Cover Image

Ambush from All Sides: Understanding Security Threats in Open-Source Software CI/CD Pipelines

Fuente: arXiv

Saved in:

Bibliographic Details
Main Authors:	Pan, Ziyue, Shen, Wenbo, Wang, Xingkai, Yang, Yutian, Chang, Rui, Liu, Yao, Liu, Chengwei, Liu, Yang, Ren, Kui
Format:	Preprint
Published:	2024
Subjects:	Cryptography and Security
Online Access:	Acceder al recurso
Tags:	Add Tag No Tags, Be the first to tag this record!

Similar Items

An OpenSource CI/CD Pipeline for Variant-Rich Software-Defined Vehicles
by: Weiß, Matthias, et al.
Published: (2025)

Enhancing Software Supply Chain Security Through STRIDE-Based Threat Modelling of CI/CD Pipelines
by: Dhandapani, Sowmiya
Published: (2025)

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software
by: Akhavani, Seyed Ali, et al.
Published: (2025)

ModuleGuard:Understanding and Detecting Module Conflicts in Python Ecosystem
by: Zhu, Ruofan, et al.
Published: (2024)

Environmental Impact of CI/CD Pipelines
by: Saavedra, Nuno, et al.
Published: (2025)

Fixing Outside the Box: Uncovering Tactics for Open-Source Security Issue Management
by: Zhang, Lyuye, et al.
Published: (2025)

VFArchē: A Dual-Mode Framework for Locating Vulnerable Functions in Open-Source Software
by: Zhang, Lyuye, et al.
Published: (2025)

Towards an Optimized Benchmarking Platform for CI/CD Pipelines
by: Japke, Nils, et al.
Published: (2025)

Advancing DevSecOps in SMEs: Challenges and Best Practices for Secure CI/CD Pipelines
by: Cheenepalli, Jayaprakashreddy, et al.
Published: (2025)

An FPGA-Based Open-Source Hardware-Software Framework for Side-Channel Security Research
by: Zoni, Davide, et al.
Published: (2024)

CI/CD Configuration Practices in Open-Source Android Apps: An Empirical Study
by: Ghaleb, Taher A., et al.
Published: (2024)

PatchFinder: A Two-Phase Approach to Security Patch Tracing for Disclosed Vulnerabilities in Open-Source Software
by: Li, Kaixuan, et al.
Published: (2024)

Evolaris: A Roadmap to Self-Evolving Software Intelligence Management
by: Liu, Chengwei, et al.
Published: (2025)

Simple CI/CD Pipeline for Web Application Using Azure
by: Ms.N.Selvalakshmi, Dr.M.Usha Devi
Published: (2026)

On Queueing Theory for Large-Scale CI/CD Pipelines Optimization
by: Bournassenko, Grégory
Published: (2025)

Reinforcement Learning for Dynamic Workflow Optimization in CI/CD Pipelines
by: Soni, Aniket Abhishek, et al.
Published: (2026)

The Embassy, the Ambush, and the Ogre
by: Morales Harley, Roberto
Published: (2024)

NIGER: Deadly Ambush
Published: (2024)

MALI: Deadly Ambush
Published: (2025)

Free for All: Open Source Software
by: Schneider, Karen
Published: (2008)

FaaSGuard: Secure CI/CD for Serverless Applications -- An OpenFaaS Case Study
by: Barrak, Amine, et al.
Published: (2025)

"Test, Build, Deploy" -- A CI/CD Framework for Open-Source Hardware Designs
by: Deutschbein, Calvin, et al.
Published: (2025)

ThreatKG: An AI-Powered System for Automated Open-Source Cyber Threat Intelligence Gathering and Management
by: Gao, Peng, et al.
Published: (2022)

Performance Optimization Model for Predicting the Impact of Refactorings in CI/CD Pipelines
by: Urdih, Francesco, et al.
Published: (2026)

From Assistance to Agency: Rethinking Autonomy and Control in CI/CD Pipelines
by: Barnes, Marcus Emmanuel, et al.
Published: (2026)

Empirical Analysis on CI/CD Pipeline Evolution in Machine Learning Projects
by: Rzig, Dhia Elhaq, et al.
Published: (2024)

Uncovering Security Threats and Architecting Defenses in Autonomous Agents: A Case Study of OpenClaw
by: Ying, Zonghao, et al.
Published: (2026)

Evolving CI/CD Pipelines with AI: Intelligent Error Detection and Performance Optimization
by: URF Publishers
Published: (2024)

PPTAM$η$: Energy Aware CI/CD Pipeline for Container Based Applications
by: Aneggi, Alessandro, et al.
Published: (2026)

The Dark Side of the Web: Towards Understanding Various Data Sources in Cyber Threat Intelligence
by: Schröer, Saskia Laura, et al.
Published: (2025)

Understanding Underrepresented Groups in Open Source Software
by: Santos, Reydne, et al.
Published: (2025)

Mali – Niger: Fuel Convoy Ambush
Published: (2024)

Reproducibility Package and CI/CD Pipeline Dataset for a Laravel–React Application Study
by: HTUN LINN KHANT, HTUN LINN KHANT
Published: (2026)

AI-Augmented CI/CD Pipelines: From Code Commit to Production with Autonomous Decisions
by: Baqar, Mohammad, et al.
Published: (2025)

Manipulating a CI/CD Pipeline in an IoT Embedded Project: A Quasi‐Experiment
by: Igor Pereira, et al.
Published: (2025)

Exploringand Unleashing the Power of Large Language Models in CI/CD Configuration Translation
by: Wang, Chong, et al.
Published: (2025)

An Overview of Cyber Security Funding for Open Source Software
by: Ruohonen, Jukka, et al.
Published: (2024)

Portable and Secure CI/CD for COBOL: Lessons from an Industrial Migration
by: Askholm, Andreas, et al.
Published: (2026)

Red-Teaming Agent Execution Contexts: Open-World Security Evaluation on OpenClaw
by: Yao, Hongwei, et al.
Published: (2026)

Open Source, Hidden Costs: A Systematic Literature Review on OSS License Management
by: Li, Boyuan, et al.
Published: (2025)