CI/CD pipeline compromise