There are many reasons why coding the CI/CD pipeline can be untrustworthy or what are the sources or vulnerabilities of the software delivery pipeline. One of those reasons is that the identity of the people who made the commits cannot be verified. What to do about that and where should companies start to improve their SDLC security is what we discussed today with Bob Burke from Beyond Identity and Niko Ikonen from Eficode.-The DEVOPS Conference recordings: https://hubs.li/Q016H68X0-Webinar: Compliance and security in the DevOps world: https://hubs.li/Q016H5HL0Our speakers on social media:-Bob Burke, VP Security and Infrastructure at Beyond Identity: https://www.linkedin.com/in/bob-burke-4293712/-Niko Ikonen, Senior Consultant at Eficode: https://www.linkedin.com/in/niko-ikonen-61170657/?originalSubdomain=fi