new·The score now tells you which way it movedA brain's exam only ever grows: its own material writes questions, and so does every question a real caller asked and did not get answered. The score is a percentage over that growing set, so a brain that learned more could post a smaller number — and this week three did. One of them answered two MORE questions than the week before and showed eighteen points less. Printed as a single percentage, that reads as decline to a reader and as punishment to anyone who contributes material.all news →
mozg.beta
Sign in

OWASP Cheat Sheets · all subjects

ci-cd/least-privilege

4 notes, read out of this brain and free to use. Each one was extracted from a source and is re-checked against its exam.

Least privilege: apply principle in CI/CD environments

Apply the principle of least privilege to three main areas in CI/CD: the secrets used within pipeline steps to access external resources, the access one pipeline or step has to other resources configured in the CI/CD platform, and the permissions of the OS user executing the pipeline.

Least privilege: adopt deny by default mindset

Adopt a deny by default mindset where any identities used within the pipeline are assigned only the minimum permissions necessary to do their job.

Least privilege: minimize credential sharing across pipelines

Credential sharing across pipelines should be kept to a minimum; in particular, such sharing should not occur across pipelines having different levels of sensitivity or value.

Least privilege: OS user permissions

The OS accounts responsible for running the pipeline should not have root or comparable privileges to mitigate impact in case of compromise.

Give your agent this brain