---
title: "Managing Compromises"
url: https://daily.dev/posts/managing-compromises-ullul3mxc
source_url: https://daily.dev/posts/managing-compromises-ullul3mxc
type: freeform
source: "Dawood Chaudary"
author: "Dawood Chaudary"
published: 2026-06-12T06:10:49.071Z
updated: 2026-06-12T06:11:07.382Z
tags: ["security", "cicd", "authentication", "devsecops"]
reading_time: 1
upvotes: 0
comments: 0
language: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Managing Compromises

**[Dawood Chaudary](https://daily.dev/sources/bppvewimrfwm9uixkizmp)** · [@dawoodchaudary](https://daily.dev/dawoodchaudary) · 1 min read · 0 upvotes · 0 comments

## Summary

Modern security should focus on limiting blast radius rather than preventing compromise entirely. Most incidents stem from excessive privilege without expiry. Key mitigations include short-lived credentials, OIDC over stored secrets, tight token scoping, strong repo-level protections, and reducing risky dependency execution paths in Node ecosystems. Supply chain attacks increasingly exploit trust rather than code vulnerabilities.

## Content

The hardest part of modern security isn’t preventing compromise.
It’s limiting impact.

Supply chain attacks are becoming more about trust abuse than code exploitation:
a token, a dependency, a CI pipeline, a forgotten permission.
And that’s enough.

If you zoom out, most incidents reduce to one design flaw:
excessive privilege without expiry.
The fix is not complicated:
• Short-lived credentials
• OIDC instead of stored secrets
• Tight token scoping
• Strong repo-level protections
• Reducing risky dependency execution paths in Node ecosystems

Security isn’t about making compromise impossible.
It’s about making it irrelevant beyond a small boundary.
[**hashtag#DevSecOps**](https://www.linkedin.com/search/results/all/?keywords=%23devsecops&origin=HASH_TAG_FROM_FEED) [**hashtag#CloudSecurity**](https://www.linkedin.com/search/results/all/?keywords=%23cloudsecurity&origin=HASH_TAG_FROM_FEED) [**hashtag#Engineering**](https://www.linkedin.com/search/results/all/?keywords=%23engineering&origin=HASH_TAG_FROM_FEED)

## Similar posts on daily.dev

- [Supply Chain Attacks Are Getting Worse—How to Shrink Your Exposure](https://daily.dev/posts/supply-chain-attacks-are-getting-worse-how-to-shrink-your-exposure-ubmswiz6g) · Security Boulevard · 0 upvotes · 0 comments
- [Modern supply-chain attacks and their real-world impact](https://daily.dev/posts/modern-supply-chain-attacks-and-their-real-world-impact-goucs5roh) · CSO Online · 0 upvotes · 0 comments
- [Security Lessons For All From GitHub's Hardened Package Publication For npm](https://daily.dev/posts/security-lessons-for-all-from-github-s-hardened-package-publication-for-npm-9t300zqmx) · GitGuardian · 0 upvotes · 0 comments

---

Tags: [#security](https://daily.dev/tags/security), [#cicd](https://daily.dev/tags/cicd), [#authentication](https://daily.dev/tags/authentication), [#devsecops](https://daily.dev/tags/devsecops)

[View this post on daily.dev](https://daily.dev/posts/managing-compromises-ullul3mxc)