I mean, because it depends where the attack happened. Working with large companies like this in CI/CD there are a number of tools that the source code gets chec

I mean, because it depends where the attack happened. Working with large companies like this in CI/CD there are a number of tools that the source code gets checked on, but not fed back into the system that could have been the source of the attack.