OpenRewrite by Moderne
@openrewrite.github.io
OpenRewrite recipes automate security vulnerability remediations, framework migrations, code compliance and more—across a growing language and technology ecosystem.
Maintained by Moderne.ai
GitHub: http://github.com/openrewrite
Maintained by Moderne.ai
GitHub: http://github.com/openrewrite
Pinned
Release 3.19.0 · openrewrite/rewrite-recipe-bom
What's Changed
Incorporates the latest versions of OpenRewrite (v8.67.0), the rewrite-gradle-plugin (v7.21.0), and the rewrite-maven-plugin (v6.24.0) to improve code parsing accuracy and recipe ex...
github.com
#OpenRewrite 8.67.0 is here! 🛫
🆕 New rewrite-angular, rewrite-react & rewrite-jasperreports
🌱 Spring Boot 4.0 & Spring Batch 6.0 migrations
⚛️ React 19 upgrade recipe with forwardRef removal
🟢 Node.js crypto & util recipes
☕ Migrate all modules and formats for Jackson v3
github.com/openrewrite/...
🆕 New rewrite-angular, rewrite-react & rewrite-jasperreports
🌱 Spring Boot 4.0 & Spring Batch 6.0 migrations
⚛️ React 19 upgrade recipe with forwardRef removal
🟢 Node.js crypto & util recipes
☕ Migrate all modules and formats for Jackson v3
github.com/openrewrite/...
Large-scale code modernization is coming to London on Dec. 10!🕰️
Hear how Meta, Google, Moderne, and DX who are shaping the future of AI-powered engineering.
Seats are limited, so reserve yours while they’re still available!
Hear how Meta, Google, Moderne, and DX who are shaping the future of AI-powered engineering.
Seats are limited, so reserve yours while they’re still available!
Code Maintenance at Scale with AI London
Billions of lines of old code are slowing innovation. Join our in-person panel with leaders from Google, Meta, DX, and Moderne on how AI is transforming the way enterprises maintain, remediate, and…
buff.ly
November 25, 2025 at 8:30 AM
Large-scale code modernization is coming to London on Dec. 10!🕰️
Hear how Meta, Google, Moderne, and DX who are shaping the future of AI-powered engineering.
Seats are limited, so reserve yours while they’re still available!
Hear how Meta, Google, Moderne, and DX who are shaping the future of AI-powered engineering.
Seats are limited, so reserve yours while they’re still available!
🎉 Spring Boot 4 is here!🍃
Upgrading doesn’t have to be painful. Moderne + OpenRewrite brings the automation! 🛠️
Learn how to modernize your stack, reduce tech debt, and unlock the latest features in our new blog.
Upgrading doesn’t have to be painful. Moderne + OpenRewrite brings the automation! 🛠️
Learn how to modernize your stack, reduce tech debt, and unlock the latest features in our new blog.
Spring Boot 4 Migration Guide: Faster, Safer, at Scale
Upgrade to Spring Boot 4 faster and with less risk. Learn how OpenRewrite and Moderne automate Java, Jakarta, Spring Framework, and dependency changes at scale.
buff.ly
November 22, 2025 at 8:45 AM
🎉 Spring Boot 4 is here!🍃
Upgrading doesn’t have to be painful. Moderne + OpenRewrite brings the automation! 🛠️
Learn how to modernize your stack, reduce tech debt, and unlock the latest features in our new blog.
Upgrading doesn’t have to be painful. Moderne + OpenRewrite brings the automation! 🛠️
Learn how to modernize your stack, reduce tech debt, and unlock the latest features in our new blog.
Reposted by OpenRewrite by Moderne
The latest episode is out!
Why Your Code Dies in Six Months: Automated Refactoring with Olga Kundzich of @moderneai.bsky.social / @openrewrite.github.io
adventuresindevops.com/episodes/202...
Why Your Code Dies in Six Months: Automated Refactoring with Olga Kundzich of @moderneai.bsky.social / @openrewrite.github.io
adventuresindevops.com/episodes/202...
Why Your Code Dies in Six Months: Automated Refactoring | Adventures in DevOps
Olga Kundzich joins to discuss why cloud-native apps decay in six months due to shifting dependencies and how OpenRewrite uses Lossless Semantic Trees to automate refactoring.
adventuresindevops.com
November 21, 2025 at 9:43 PM
The latest episode is out!
Why Your Code Dies in Six Months: Automated Refactoring with Olga Kundzich of @moderneai.bsky.social / @openrewrite.github.io
adventuresindevops.com/episodes/202...
Why Your Code Dies in Six Months: Automated Refactoring with Olga Kundzich of @moderneai.bsky.social / @openrewrite.github.io
adventuresindevops.com/episodes/202...
#OpenRewrite 8.67.0 is here! 🛫
🆕 New rewrite-angular, rewrite-react & rewrite-jasperreports
🌱 Spring Boot 4.0 & Spring Batch 6.0 migrations
⚛️ React 19 upgrade recipe with forwardRef removal
🟢 Node.js crypto & util recipes
☕ Migrate all modules and formats for Jackson v3
github.com/openrewrite/...
🆕 New rewrite-angular, rewrite-react & rewrite-jasperreports
🌱 Spring Boot 4.0 & Spring Batch 6.0 migrations
⚛️ React 19 upgrade recipe with forwardRef removal
🟢 Node.js crypto & util recipes
☕ Migrate all modules and formats for Jackson v3
github.com/openrewrite/...
Release 3.19.0 · openrewrite/rewrite-recipe-bom
What's Changed
Incorporates the latest versions of OpenRewrite (v8.67.0), the rewrite-gradle-plugin (v7.21.0), and the rewrite-maven-plugin (v6.24.0) to improve code parsing accuracy and recipe ex...
github.com
November 20, 2025 at 9:13 PM
#OpenRewrite 8.67.0 is here! 🛫
🆕 New rewrite-angular, rewrite-react & rewrite-jasperreports
🌱 Spring Boot 4.0 & Spring Batch 6.0 migrations
⚛️ React 19 upgrade recipe with forwardRef removal
🟢 Node.js crypto & util recipes
☕ Migrate all modules and formats for Jackson v3
github.com/openrewrite/...
🆕 New rewrite-angular, rewrite-react & rewrite-jasperreports
🌱 Spring Boot 4.0 & Spring Batch 6.0 migrations
⚛️ React 19 upgrade recipe with forwardRef removal
🟢 Node.js crypto & util recipes
☕ Migrate all modules and formats for Jackson v3
github.com/openrewrite/...
OpenRewrite is a finalist for "Most Innovative DevOps Open Source Project" in the 2025 DevOps Dozens Awards!🏆
This is a reflection of all your contributions, ideas, and support.
Let’s get it recognized! Cast your vote by Dec. 31. ✅
buff.ly/J1vK8u2
This is a reflection of all your contributions, ideas, and support.
Let’s get it recognized! Cast your vote by Dec. 31. ✅
buff.ly/J1vK8u2
November 20, 2025 at 7:15 AM
OpenRewrite is a finalist for "Most Innovative DevOps Open Source Project" in the 2025 DevOps Dozens Awards!🏆
This is a reflection of all your contributions, ideas, and support.
Let’s get it recognized! Cast your vote by Dec. 31. ✅
buff.ly/J1vK8u2
This is a reflection of all your contributions, ideas, and support.
Let’s get it recognized! Cast your vote by Dec. 31. ✅
buff.ly/J1vK8u2
Live from @timtebeek.github.io’s OpenRewrite workshop at Rabobank! 🗣️
November 18, 2025 at 5:52 PM
Live from @timtebeek.github.io’s OpenRewrite workshop at Rabobank! 🗣️
Join the next Code Remix Weekly tomorrow with @tomcools.be, DevRel at Timefold! 🎙️
Discover Timefold, the powerful OptaPlanner fork, and learn about its origin, automatic migration, and how it rethinks breaking changes.💪
🔴 Tomorrow at 21:00 CET / 3 PM ET
Discover Timefold, the powerful OptaPlanner fork, and learn about its origin, automatic migration, and how it rethinks breaking changes.💪
🔴 Tomorrow at 21:00 CET / 3 PM ET
Code Remix Weekly | Automating Adoption and Optimization with Timefold
Tom Cools, DevRel at Timefold, joins the stream!Timefold, the powerful fork of OptaPlanner, makes upgrading and optimization easier than ever. Tom will dive ...
buff.ly
November 18, 2025 at 5:01 PM
Join the next Code Remix Weekly tomorrow with @tomcools.be, DevRel at Timefold! 🎙️
Discover Timefold, the powerful OptaPlanner fork, and learn about its origin, automatic migration, and how it rethinks breaking changes.💪
🔴 Tomorrow at 21:00 CET / 3 PM ET
Discover Timefold, the powerful OptaPlanner fork, and learn about its origin, automatic migration, and how it rethinks breaking changes.💪
🔴 Tomorrow at 21:00 CET / 3 PM ET
OpenRewrite is a finalist for "Most Innovative DevOps Open Source Project" in the 2025 DevOps Dozens Awards!🏆
This is a reflection of all your contributions, ideas, and support.
Let’s get it recognized! Cast your vote by Dec. 31. ✅
buff.ly/Tr138eS
This is a reflection of all your contributions, ideas, and support.
Let’s get it recognized! Cast your vote by Dec. 31. ✅
buff.ly/Tr138eS
November 13, 2025 at 5:05 PM
OpenRewrite is a finalist for "Most Innovative DevOps Open Source Project" in the 2025 DevOps Dozens Awards!🏆
This is a reflection of all your contributions, ideas, and support.
Let’s get it recognized! Cast your vote by Dec. 31. ✅
buff.ly/Tr138eS
This is a reflection of all your contributions, ideas, and support.
Let’s get it recognized! Cast your vote by Dec. 31. ✅
buff.ly/Tr138eS
Reposted by OpenRewrite by Moderne
One of the tools that really made a difference for me as a software engineer in the past few years is @openrewrite.github.io. Kudos to the team and special thanks to @timtebeek.github.io for introducing me to it and providing guidance for using it and working with it effectively 🙏🏻 /1
November 12, 2025 at 8:25 PM
One of the tools that really made a difference for me as a software engineer in the past few years is @openrewrite.github.io. Kudos to the team and special thanks to @timtebeek.github.io for introducing me to it and providing guidance for using it and working with it effectively 🙏🏻 /1
#OpenRewrite 8.66.1 is here! 🚆
🌱 Spring Boot 4.0 migration recipes
🗂 Additional SpringFox conversions
🔐 Severity-based CVE filtering
🍐 Expand Guava to JDK conversions
🎯 Convert external `@InlineMe` annotations into recipes
🐛 Fixed Maven multi-module resource handling
github.com/openrewrite/...
🌱 Spring Boot 4.0 migration recipes
🗂 Additional SpringFox conversions
🔐 Severity-based CVE filtering
🍐 Expand Guava to JDK conversions
🎯 Convert external `@InlineMe` annotations into recipes
🐛 Fixed Maven multi-module resource handling
github.com/openrewrite/...
Release 3.18.0 · openrewrite/rewrite-recipe-bom
What's Changed
Incorporates the latest versions of OpenRewrite (v8.66.1), the rewrite-gradle-plugin (v7.20.0), and the rewrite-maven-plugin (v6.23.0) to improve code parsing accuracy and recipe ex...
github.com
November 12, 2025 at 7:18 PM
#OpenRewrite 8.66.1 is here! 🚆
🌱 Spring Boot 4.0 migration recipes
🗂 Additional SpringFox conversions
🔐 Severity-based CVE filtering
🍐 Expand Guava to JDK conversions
🎯 Convert external `@InlineMe` annotations into recipes
🐛 Fixed Maven multi-module resource handling
github.com/openrewrite/...
🌱 Spring Boot 4.0 migration recipes
🗂 Additional SpringFox conversions
🔐 Severity-based CVE filtering
🍐 Expand Guava to JDK conversions
🎯 Convert external `@InlineMe` annotations into recipes
🐛 Fixed Maven multi-module resource handling
github.com/openrewrite/...
Join the next Code Remix Weekly to learn how to detect and fix quantum-vulnerable code across massive systems with Moderne's LST-powered analysis and PQC readiness workflows.💪
🔴 Tomorrow at 21:00 CET / 3 PM ET with guest @mkheck.bsky.social
🔴 Tomorrow at 21:00 CET / 3 PM ET with guest @mkheck.bsky.social
Code Remix Weekly | Quantum-ready Cryptography with Moderne
What’s your level of readiness for quantum-era threats?As quantum computing moves from theory toward reality, the cryptographic foundations of modern softwar...
buff.ly
November 11, 2025 at 7:06 PM
Join the next Code Remix Weekly to learn how to detect and fix quantum-vulnerable code across massive systems with Moderne's LST-powered analysis and PQC readiness workflows.💪
🔴 Tomorrow at 21:00 CET / 3 PM ET with guest @mkheck.bsky.social
🔴 Tomorrow at 21:00 CET / 3 PM ET with guest @mkheck.bsky.social
Reposted by OpenRewrite by Moderne
Attending OWASP Global AppSec in DC?
Don't miss this session today from our CEO & Co-Founder, Jonathan Schneider, on tackling post-quantum cryptographic risks in real code.💡
Friday, Nov. 7 at 11:30 am - 12:15 pm EST
📍Independence Ballroom A-E
@owasp.org
Don't miss this session today from our CEO & Co-Founder, Jonathan Schneider, on tackling post-quantum cryptographic risks in real code.💡
Friday, Nov. 7 at 11:30 am - 12:15 pm EST
📍Independence Ballroom A-E
@owasp.org
November 7, 2025 at 1:31 PM
Attending OWASP Global AppSec in DC?
Don't miss this session today from our CEO & Co-Founder, Jonathan Schneider, on tackling post-quantum cryptographic risks in real code.💡
Friday, Nov. 7 at 11:30 am - 12:15 pm EST
📍Independence Ballroom A-E
@owasp.org
Don't miss this session today from our CEO & Co-Founder, Jonathan Schneider, on tackling post-quantum cryptographic risks in real code.💡
Friday, Nov. 7 at 11:30 am - 12:15 pm EST
📍Independence Ballroom A-E
@owasp.org
Join the next Code Remix Weekly, where we’ll explore how type attribution lets recipes go beyond pattern matching to truly understand your code, so you can write transformations that work reliably across projects. ⌨️
🔴 Tomorrow at 21:00 CET / 3 PM ET
buff.ly/4cPC1fy
🔴 Tomorrow at 21:00 CET / 3 PM ET
buff.ly/4cPC1fy
Code Remix Weekly | No Type Left Behind: Type Attribution in OpenRewrite
Discover how #OpenRewrite “knows your type.” 💬In this session, we’ll explore how type attribution lets recipes go beyond pattern matching to truly understan...
buff.ly
November 4, 2025 at 7:00 PM
Join the next Code Remix Weekly, where we’ll explore how type attribution lets recipes go beyond pattern matching to truly understand your code, so you can write transformations that work reliably across projects. ⌨️
🔴 Tomorrow at 21:00 CET / 3 PM ET
buff.ly/4cPC1fy
🔴 Tomorrow at 21:00 CET / 3 PM ET
buff.ly/4cPC1fy
Migrating to Java 25 doesn't have to be a nightmare. 👻
🎃 No tricks here! Watch how it's done in under 5 minutes.
🎃 No tricks here! Watch how it's done in under 5 minutes.
Migrate to Java 25 using OpenRewrite
This recipe will apply changes commonly needed when migrating to Java 25. This recipe will also replace deprecated API with equivalents when there is a clear migration strategy. Build files will also…
buff.ly
October 31, 2025 at 4:05 PM
Migrating to Java 25 doesn't have to be a nightmare. 👻
🎃 No tricks here! Watch how it's done in under 5 minutes.
🎃 No tricks here! Watch how it's done in under 5 minutes.
In this article featured in @infoworld.bsky.social, @mkheck.bsky.social explores what makes OpenRewrite tick, enabling automated, reliable code transformation—and how Moderne scales this power for enterprise codebase evolution. 🦋
Full article:
Full article:
A practitioner’s primer on deterministic application modernization
How OpenRewrite uses Lossless Semantic Trees to deliver a full-fidelity representation of code, making transformations precise, repeatable, and auditable.
buff.ly
October 30, 2025 at 4:05 PM
In this article featured in @infoworld.bsky.social, @mkheck.bsky.social explores what makes OpenRewrite tick, enabling automated, reliable code transformation—and how Moderne scales this power for enterprise codebase evolution. 🦋
Full article:
Full article:
In this spooky edition of Code Remix Weekly, we'll share real-world tales of code gone wrong, and more importantly, how to keep your next big change from turning into a horror story of its own.🎃
🔴 Tomorrow | 21:00 CEST / 3 PM ET 👻
🔴 Tomorrow | 21:00 CEST / 3 PM ET 👻
Code Remix Weekly | Refactoring Horror Stories
Every developer has faced a nightmare scenario: a simple migration that spirals into chaos, a refactor that awakens long-forgotten bugs, or an upgrade that r...
buff.ly
October 28, 2025 at 6:03 PM
In this spooky edition of Code Remix Weekly, we'll share real-world tales of code gone wrong, and more importantly, how to keep your next big change from turning into a horror story of its own.🎃
🔴 Tomorrow | 21:00 CEST / 3 PM ET 👻
🔴 Tomorrow | 21:00 CEST / 3 PM ET 👻
Reposted by OpenRewrite by Moderne
Java 25 removes the SecurityManager, replaces ZipError, and more. Don't panic.
@openrewrite.github.io helps you get rid of the hurdles to focus on more awesome stuff - like pattern matching or concurrency.
One Maven command migrates your entire codebase safely.
#java #OpenRewrite
@openrewrite.github.io helps you get rid of the hurdles to focus on more awesome stuff - like pattern matching or concurrency.
One Maven command migrates your entire codebase safely.
#java #OpenRewrite
October 25, 2025 at 6:34 AM
Java 25 removes the SecurityManager, replaces ZipError, and more. Don't panic.
@openrewrite.github.io helps you get rid of the hurdles to focus on more awesome stuff - like pattern matching or concurrency.
One Maven command migrates your entire codebase safely.
#java #OpenRewrite
@openrewrite.github.io helps you get rid of the hurdles to focus on more awesome stuff - like pattern matching or concurrency.
One Maven command migrates your entire codebase safely.
#java #OpenRewrite
Join us on Nov. 13 IRL in NYC for Code Maintenance at Scale with AI.🗽 Leaders from Google, Meta, Uber, and Moderne will discuss how AI is transforming enterprise codebases.
Save your spot: buff.ly/mTDbvJa
Save your spot: buff.ly/mTDbvJa
October 26, 2025 at 4:02 PM
Join us on Nov. 13 IRL in NYC for Code Maintenance at Scale with AI.🗽 Leaders from Google, Meta, Uber, and Moderne will discuss how AI is transforming enterprise codebases.
Save your spot: buff.ly/mTDbvJa
Save your spot: buff.ly/mTDbvJa
Reposted by OpenRewrite by Moderne
Teaching @openrewrite.github.io, my favorite moment is watching devs write their first custom recipes, realize they can query any codebase like a database, then immediately plan to refactor their entire monolith.
Today's lab: From "what's a visitor pattern?" to "I can transform 1M lines" with tests
Today's lab: From "what's a visitor pattern?" to "I can transform 1M lines" with tests
October 22, 2025 at 10:14 AM
Teaching @openrewrite.github.io, my favorite moment is watching devs write their first custom recipes, realize they can query any codebase like a database, then immediately plan to refactor their entire monolith.
Today's lab: From "what's a visitor pattern?" to "I can transform 1M lines" with tests
Today's lab: From "what's a visitor pattern?" to "I can transform 1M lines" with tests
🎉 The Marketplace has officially surpassed 5,000 recipes! 🎉
Huge thanks to our community for contributing, sharing, and automating code transformations. Here’s to cleaner, smarter code for everyone! 👏
Huge thanks to our community for contributing, sharing, and automating code transformations. Here’s to cleaner, smarter code for everyone! 👏
October 22, 2025 at 6:57 PM
🎉 The Marketplace has officially surpassed 5,000 recipes! 🎉
Huge thanks to our community for contributing, sharing, and automating code transformations. Here’s to cleaner, smarter code for everyone! 👏
Huge thanks to our community for contributing, sharing, and automating code transformations. Here’s to cleaner, smarter code for everyone! 👏
#OpenRewrite v8.64.0 is out! 🎯
🔲 TOML building block recipes
🤠 Migrate Jackson v3 dataformats
🍁 Switch to Maven 4
🐳 Upgrade to Testcontainers v2
🏗️ beans.xml & web.xml to Spring
💉 Field to constructor injection for Spring
🚩 OpenFeature flag removal recipes
docs.openrewrite.org/changelog/8-...
🔲 TOML building block recipes
🤠 Migrate Jackson v3 dataformats
🍁 Switch to Maven 4
🐳 Upgrade to Testcontainers v2
🏗️ beans.xml & web.xml to Spring
💉 Field to constructor injection for Spring
🚩 OpenFeature flag removal recipes
docs.openrewrite.org/changelog/8-...
8.64.0 release (2025-10-22) | OpenRewrite Docs
What's changed in OpenRewrite version 8.64.0.
docs.openrewrite.org
October 22, 2025 at 4:21 PM
#OpenRewrite v8.64.0 is out! 🎯
🔲 TOML building block recipes
🤠 Migrate Jackson v3 dataformats
🍁 Switch to Maven 4
🐳 Upgrade to Testcontainers v2
🏗️ beans.xml & web.xml to Spring
💉 Field to constructor injection for Spring
🚩 OpenFeature flag removal recipes
docs.openrewrite.org/changelog/8-...
🔲 TOML building block recipes
🤠 Migrate Jackson v3 dataformats
🍁 Switch to Maven 4
🐳 Upgrade to Testcontainers v2
🏗️ beans.xml & web.xml to Spring
💉 Field to constructor injection for Spring
🚩 OpenFeature flag removal recipes
docs.openrewrite.org/changelog/8-...
Class is in session! 📚
Introduction to OpenRewrite training is happening now.🤩
Couldn't make it? Head to our training hub to sign up for the next session:
buff.ly/bHlO13z
Introduction to OpenRewrite training is happening now.🤩
Couldn't make it? Head to our training hub to sign up for the next session:
buff.ly/bHlO13z
October 21, 2025 at 3:09 PM
Class is in session! 📚
Introduction to OpenRewrite training is happening now.🤩
Couldn't make it? Head to our training hub to sign up for the next session:
buff.ly/bHlO13z
Introduction to OpenRewrite training is happening now.🤩
Couldn't make it? Head to our training hub to sign up for the next session:
buff.ly/bHlO13z
Heading to Open Source in Finance Forum in New York?🗽
Join Moderne and TIAA to keep the conversation going after the event at Merge & Mingle Happy Hour.🍻
👉 RSVP at buff.ly/U1S4vNe
Join Moderne and TIAA to keep the conversation going after the event at Merge & Mingle Happy Hour.🍻
👉 RSVP at buff.ly/U1S4vNe
October 21, 2025 at 11:30 AM
Heading to Open Source in Finance Forum in New York?🗽
Join Moderne and TIAA to keep the conversation going after the event at Merge & Mingle Happy Hour.🍻
👉 RSVP at buff.ly/U1S4vNe
Join Moderne and TIAA to keep the conversation going after the event at Merge & Mingle Happy Hour.🍻
👉 RSVP at buff.ly/U1S4vNe
👀 Got a refactoring nightmare or developer horror story?
Comment or DM us with your stories of broken builds, cursed commits, and “it worked on my machine” moments and we'll share them live on the Code Remix Weekly Halloween special. 🎃
Comment or DM us with your stories of broken builds, cursed commits, and “it worked on my machine” moments and we'll share them live on the Code Remix Weekly Halloween special. 🎃
October 18, 2025 at 6:30 AM
👀 Got a refactoring nightmare or developer horror story?
Comment or DM us with your stories of broken builds, cursed commits, and “it worked on my machine” moments and we'll share them live on the Code Remix Weekly Halloween special. 🎃
Comment or DM us with your stories of broken builds, cursed commits, and “it worked on my machine” moments and we'll share them live on the Code Remix Weekly Halloween special. 🎃
Join the Code Remix Weekly security special tomorrow at 3 PM ET when our "mystery guest" walks through new GitHub Actions security recipes.
Learn practical ways to secure your CI/CD pipelines. 🔒
Learn practical ways to secure your CI/CD pipelines. 🔒
Code Remix Weekly | GitHub Actions Hardening Tips & Recipes
🔒 Security Special: GitHub Actions Hardening Tips & RecipesTune into Code Remix Weekly on October 15 at 3 PM ET for a security special! Our guest will walk ...
buff.ly
October 14, 2025 at 6:02 PM
Join the Code Remix Weekly security special tomorrow at 3 PM ET when our "mystery guest" walks through new GitHub Actions security recipes.
Learn practical ways to secure your CI/CD pipelines. 🔒
Learn practical ways to secure your CI/CD pipelines. 🔒