CI/CD security: How to secure your GitHub ecosystem

This article details how to apply threat modeling to GitHub to improve CI/CD security. It identifies key inputs (authentication, source code, configurations, secrets) and associated risks like unauthorized access and data exfiltration, outlining how to detect these threats using tools like static code analysis and cloud SIEMs. The article also examines historical attacks, such as the Shai Hulud worms and OAuth token compromises, to highlight preventative measures and detection strategies for a more secure GitHub environment.