Robuta

https://www.cncf.io/online-programs/cncf-live-webinar-pwning-the-ci-workflow-and-how-to-prevent-it/
Our journey to open source and GitOps heaven has exposed new security challenges as our CI platforms have become exposed to the outside world.
and howcncflivewebinarpwning
https://pwning.owasp-juice.shop/companion-guide/latest/part4/integration.html
integrationpwningowaspjuiceshop