A DevOps pipeline is an automated workflow that takes source code through build, test, and deployment steps. It helps teams release software quickly and consistently by replacing manual handoffs with repeatable jobs run by CI/CD tools, build servers, and deployment systems.
In cyber security, the pipeline is a high-value target because it can change what software gets shipped. If an attacker steals credentials, alters build scripts, poisons dependencies, or compromises a pipeline runner, they may be able to inject malicious code or leak secrets into released artifacts. Defenses focus on least-privilege access, strong authentication, isolated and trusted build environments, signed artifacts, approval gates, and provenance checks that show how software was built. Protecting the DevOps pipeline helps preserve the integrity of the software supply chain.