OIDC and CICD: Why Your CI Pipeline Is Your Greatest Security Threat
Tuesday, 10 November 2026, 11:00 to 11:45 · Workshop room · seats 18
Lightning talk (10 min)IntermediatePractice
Your CI/CD Process is chock full of credentials, and almost anyone in your company has access to it. Configuring your CI correctly is vital to supply chain security. We discuss how to reduce that attack surface by enforcing proper branch permissions and using OIDC to reduce long-lived credentials and tie branches to roles.
Noemí Marrero
Engineering Manager at Fathom Analytics Group
Noemí Marrero is a Engineering Manager at Fathom Analytics Group, working on data storage and replication. They have shipped and operated production systems for the last decade and are bringing a war story or two to this stage.