What a SOC 2 auditor actually asks about your CI/CD pipeline

The first SOC 2 audit I sat in on with an engineering team went sideways in about eleven...