Solutions: CI / CD with secure secrets management, CI and (Micro-)service architecture with segregation

Further concerns should be addressed based on system analysis and hardening. For generic security baselines the CIS benchmark can be helpful

Handy snippets

List dockerized processes

...