Compromised build pipelines injecting malicious code - Tampered base images in private registries - Build-time secret leakage through layer caching