CI/CD security

- Pipeline secret exposure - Build artifact integrity - Dependency confusion attacks - Supply chain attack vectors For each vulnerability class provide: typical code patterns (good and bad), grep/regex patterns to find issues, tool commands, severity rating guidance, and secure coding fixes with code examples. Output as a review checklist with concrete examples.