Build-Time Security: Securing Your CI/CD Pipeline