CI/CD

The build pipeline can change software after a human has reviewed it, which makes it one of the most powerful things in an organisation.

Code review checks what was written. The pipeline decides what actually gets built and shipped, using its own dependencies, its own credentials and its own machines. Compromise it and you can ship anything, reviewed or not. It is production infrastructure and it is frequently run with the informality of a developer tool.