{"id":"W7124920585","doi":"10.1109/cloudcom67567.2025.11331540","title":"A Threat-Oriented Study of API Security Challenges in CI/CD Pipelines","year":2025,"lang":"","type":"article","venue":"","topic":"Security and Verification in Computing","field":"Computer Science","cited_by":0,"is_retracted":false,"has_abstract":true,"ca_institutions":"IBM (Canada); Western University","funders":"","keywords":"Workflow; Security bug; Credential; Pipeline (software); Pipeline transport; Dependency (UML); DevOps; Software; Threat model; Confusion","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.007336726,0.0009484094,0.0004326107,0.005119084,0.00221948,0.006083905,0.001526261,0.002833676,0.002444045],"category_scores_gemma":[0.02844049,0.0006938868,0.0009405468,0.002460762,0.005648887,0.01317169,0.004821361,0.004574466,0.000543643],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.002656787,"about_ca_system_score_gemma":0.002472008,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.003392049,"about_ca_topic_score_gemma":0.002050358,"domain_scores_codex":[0.9922861,0.002824725,0.0004091019,0.0006579781,0.00277471,0.001047398],"domain_scores_gemma":[0.9617323,0.02499651,0.004224653,0.003613509,0.004277072,0.001155945],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"theoretical_or_conceptual","study_design_gemma":"observational","study_design_scores_codex":[0.0002009674,0.000227456,0.03842686,0.0009018985,0.00008981009,0.002763822,0.01197238,0.04668937,0.005310094,0.7763905,0.006941042,0.1100858],"study_design_scores_gemma":[0.00003387708,0.0006133028,0.02343856,0.002283639,0.0001833096,0.008922427,0.02493588,0.2994389,0.01714882,0.4936313,0.1290743,0.0002957272],"study_design_candidate":"observational","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.3418664,0.009764185,0.5246255,0.01588785,0.0003584611,0.0006573293,0.0003380832,0.0008935118,0.1056086],"genre_scores_gemma":[0.9419336,0.004006748,0.04774408,0.000764924,0.0001147843,0.0001314555,0.0001667757,0.0001257541,0.005011993],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.007336726,"threshold_uncertainty_score":0.03880078,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.06290319266304673,"score_gpt":0.3222554423474637,"score_spread":0.259352249684417,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}