Pipelines Zero Standing Privilege is the security model that eliminates long-lived credentials in CI/CD systems. Instead of storing static keys or admin tokens in pipelines, access is granted on demand, for the shortest possible time, and then revoked automatically. The pipeline never holds permanent secrets. Attack surface drops to near zero.
Traditional pipelines rely on stored secrets—API keys in environment variables, SSH keys in config files, admin tokens in vaults. Even with encryption, these are targets. If compromised, the attacker gains continuous access. Zero Standing Privilege changes that. Temporary, scoped credentials are created only when the pipeline step runs. They expire immediately after use. No reuse. No persistence.
Implementing Zero Standing Privilege in pipelines requires tight integration between your CI/CD runner and an identity and access management (IAM) system. The IAM issues ephemeral credentials via just-in-time provisioning. Each job requests access through an automated broker, which validates conditions like branch, commit hash, approver, and job metadata before issuing a key. The IAM can log every grant, bind it to a specific action, and revoke it instantly.