Definition
An attack that targets the automated software build-and-deployment pipeline an organisation uses to ship code—specifically the AI agents and assistants now embedded inside it. By compromising the AI component of a CI/CD pipeline (for example, a GitHub Action that uses an AI coding agent), an attacker can inject malicious code into every software release the pipeline produces.
Why it matters
CI/CD pipelines are the factory floor of modern software delivery. When an AI coding agent embedded in that pipeline is compromised, the attacker inherits the pipeline's broad permissions—touching source code, secrets, and production environments. This is a supply-chain attack that can affect every application the organisation ships.