{"id":"W7124920585","doi":"10.1109/cloudcom67567.2025.11331540","title":"A Threat-Oriented Study of API Security Challenges in CI/CD Pipelines","year":2025,"lang":"","type":"article","venue":"","topic":"Security and Verification in Computing","field":"Computer Science","cited_by":0,"is_retracted":false,"has_abstract":true,"ca_institutions":"IBM (Canada); Western University","funders":"","keywords":"Workflow; Security bug; Credential; Pipeline (software); Pipeline transport; Dependency (UML); DevOps; Software; Threat model; Confusion","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["metaepi_narrow"],"consensus_categories":[],"category_scores_codex":[0.001517494,0.0003655662,0.0006783386,0.00067383,0.0002135401,0.0001157628,0.001534484,0.0002044438,0.00007112037],"category_scores_gemma":[0.0002559,0.000375322,0.0001261755,0.002461034,0.0001308804,0.0003651314,0.00107596,0.0004659427,0.00002154419],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00008739602,"about_ca_system_score_gemma":0.000277384,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0007168695,"about_ca_topic_score_gemma":0.001494566,"domain_scores_codex":[0.995795,0.0005372625,0.001401201,0.001221082,0.0005423462,0.0005030806],"domain_scores_gemma":[0.9969788,0.0005395982,0.000347815,0.001516617,0.0005224316,0.00009468899],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"theoretical_or_conceptual","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0001450234,0.014924,0.04246748,0.0008180423,0.0002307245,0.00003296835,0.1390688,0.0005905903,0.00006238972,0.6137821,0.0005369282,0.1873409],"study_design_scores_gemma":[0.006450402,0.001298629,0.07593671,0.001140422,0.00008929203,0.000009134897,0.06264994,0.8175625,0.001600468,0.02735624,0.004901522,0.001004786],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.8624282,0.0131583,0.08916624,0.005691442,0.003375138,0.001819906,0.000005723968,0.0002466372,0.02410841],"genre_scores_gemma":[0.9968492,0.001342645,0.001326819,0.0001442818,0.00009687532,0.00003276898,0.00000112228,0.000009010463,0.0001973214],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.8169718,"threshold_uncertainty_score":0.9998699,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.06290319266304673,"score_gpt":0.3222554423474637,"score_spread":0.259352249684417,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}