Confluent interview question

How to secure a CI/CD pipeline?