One thing I haven't seen talked about at all is the local development setup. I was thinking of putting node/js projects fully into docker containers (and mounting the project directory as a volume for hot reloading). While this doesn't fix the CI attack vector, it should mitigate risk for personal/work machines.
I'd be interested in hearing the setup other people have for their dev envs, also are you using separate browsers for Dev/Internet?
I'd be interested in hearing the setup other people have for their dev envs, also are you using separate browsers for Dev/Internet?