Real-world stories of how we’ve compromised CI/CD pipelines
Is it just my impression or security in Jenkins seems much more challenging and more time-consuming than in GitLab? 
This post gives many examples where GitLab was attacked, so of course bad practices like privileged containers can lead to the compromise of a server independently by the technology used, but from my experience with Jenkins, I've seen using passwords in plaintext so many times, even in big companies.