DevOps Articles

Let’s Hack a Pipeline: Shared Infrastructure

One more time: security is a shared responsibility. The purpose of this series is to showcase some potential pitfalls to help you avoid them.

If multiple projects are each targeting the same agent instance, then everyone is at the mercy of the least-defended pipeline.

All the other pipeline jobs which run on that agent would see the changed environment, whether or not they expected it.

Because the agent is reimaged after each use, there’s no standing or persistent infrastructure to attack.