This blog post discusses significant supply chain attacks targeting CI/CD pipelines that occurred in March 2026, detailing vulnerabilities and potential damage from compromised dependencies, tools, and configurations. Key lessons include implementing Pipeline Execution Policies to enforce security checks and prevent such attacks. The article emphasizes the importance of treating pipeline tools as potential attack vectors and suggests strategies to secure software supply chains.