Title: Discussion 7 — Where Would a Compromised Secret Do the Most Damage?
Course: AIINFRA 303: Capstone Project > Section: Week 07 — A CI/CD Pipeline for Your Capstone

💬 Discussion 7 — Where Would a Compromised Secret Do the Most Damage? (20 pts)

Look at the pipeline you just built (or are building) for your capstone in Lab 7. Identify one specific point in your pipeline — a secret, a token, a dependency, a step — where, if it were compromised, it could do the most damage to your project or its users. In your post, address:

- Where in your pipeline is this risk (which stage, which credential or dependency)?
- What's the worst realistic outcome if it were compromised (e.g., an attacker pushes a malicious image to your registry, exfiltrates data, gains cloud access)?
- What control would catch or prevent it — be specific (e.g., OIDC instead of a long-lived key, a secret-scanning pre-commit hook, pinning a dependency to a hash instead of a floating version tag, branch protection requiring review before merge).

Respond to at least two classmates: compare their weak point to your own pipeline — do you share the same risk, or did they spot something you hadn't considered?