Attacks/Supply Chain/SUP-006

CRITICALCWE-78

SUP-006 Build Script Injection via Secret Store

Supply Chain: Attempts to compromise agent dependencies through supply chain attacks

Description

Stores a malicious build script as a secret to poison the build pipeline

Remediation

Reject lifecycle scripts that download and execute remote code.

Severity

CRITICAL

OASB Control

CWE

CWE-78

PreviousSUP-005 Dependency Confusion via Namespace Collision NextSUP-007 Transitive Dependency Path Traversal