Automation with CI/CD and the consequent need to grant privileged access to tools carries the risk of unauthorised changes being made to clusters. For example, a developer may apply a new version of an application to a cluster that has not been sufficiently tested or has not gone through a release process. If there are errors in authorisations in a CI/CD environment, malware may be able to penetrate the clusters and read, delete, or change data there.