Real-world stories of how we’ve compromised CI/CD pipelines