@misc{indiciaef2ae7f0b5e0d, title = {Ambush from All Sides: Understanding Security Threats in Open-Source Software CI/CD Pipelines}, author = {Ziyue Pan and Wenbo Shen and Xingkai Wang and Yutian Yang and Rui Chang and Yao Liu and Chengwei Liu and Yang Liu and Kui Ren}, year = {2024}, doi = {10.1109/tdsc.2023.3253572}, url = {https://arxiv.org/abs/2401.17606}, note = {Source identifier: 2401.17606} }