Zero trust has become essential for enterprise security, applied to networks, user identities, and endpoints.However, CI/CD pipelines have been overlooked in terms of applying zero-trust principles.Pipelines commonly involve long-lived secrets and excessive access, which conflicts with the zero-trust model.Treating pipelines as untrusted by default is necessary to enhance automation and access security.