CI/CD pipelines are the backbone of modern software delivery, but they've become prime targets for attackers seeking to compromise entire software supply chains.