Recent supply chain attacks make me feel that the phase has clearly changed.
This article is not a complete solution. It is a summary of what I have been thinking about development environments and CI/CD after seeing recent supply chain attacks.
In the past, many attacks targeted people with low computer literacy. For example, attackers asked users to open suspicious emails, run suspicious attachments, or enter credentials into fake websites.
Of course, these attacks are still serious. But in many cases, there was at least some room for individual caution.
Recent attacks are different.
