Trust No Pipeline: Securing Software Delivery and Workload Identity in the Cloud — Krakow | Rifio