A reported flaw pattern in build automation shows how a single CI/CD weakness can put repository control and software supply-chain trust at risk.