A CI/CD environment is the automated system that continuously builds, tests, packages, and deploys software. CI means continuous integration, where code changes are merged and validated often. CD means continuous delivery or deployment, where approved builds are pushed toward release with minimal manual steps.
In cyber security, CI/CD environments are high-value targets because they can handle source code, secrets, signing keys, and release artifacts. If an attacker compromises a pipeline, they may inject malicious code into trusted software, poison dependencies, or alter build output before it reaches users. Defenders monitor these systems closely with provenance checks, artifact signing, restricted credentials, and least-privilege access. In supply-chain attacks, unusual package activity or unexpected network requests from build servers can be a warning that the pipeline itself has become part of the attack path.