Let's Hack a Pipeline: Shared Infrastructure

This post details the risks associated with shared infrastructure for pipelines, where compromising one pipeline can lead to the compromise of all pipelines using the same agent pool. It recommends using one-time use agents (Microsoft-hosted or scale set agents) and running self-hosted agents with minimal privileges as mitigation strategies. It also highlights that project-level isolation is a more appropriate middle ground than sharing pools across projects.