Novo Nordisk Breach Exposes Software Development Pipeline Risk

A leaked long‑lived GitHub personal access token at Novo Nordisk exposed development infrastructure and repositories, highlighting risks from static credentials in CI/CD pipelines; the report emphasizes supply‑chain, intellectual‑property, regulatory, and public‑health implications and recommends short‑lived credentials, OIDC-based auth, continuous secret scanning, vaulting, and behavioral anomaly detection.