Roche Interview Question

What are CI/CD pipelines security best practices?