Modern software gets built by pipelines, automated workflows that pull code, run tests, sign artifacts, and push releases. These pipelines hold secrets: API tokens, service account credentials, signing keys, publishing tokens. And they trust the code they execute.