CI/CD pipelines carry broad access to code, secrets, and infrastructure, which makes them a high-value target worth protecting deliberately. Strong platform teams treat that access as a design priority, not an afterthought.

Many pipelines run with default trust: broad permissions, automated scans, and little visibility into what happens under the hood. A recent industry incident showed how much impact a single pipeline tool can have when it operates without close oversight, with researchers linking it to more than 500,000 exposed secrets. The lesson points to the pipeline itself—not the code or the cloud.

In this PlatformCon 26 talk, Deon Guo, Cloud Security Architect at ClearRoute, shares a mindset shift for platform teams: build pipelines to assume breach from the start, so trust is earned continuously rather than granted once.

He walks through a practical framework covering prevention, access control, containment, and detection, grounded in real-world pipeline design.

Watch the full talk below to see how it works.