praetorian-inc/trajan

poutine, a supply chain vulnerability scanner for build pipelines

Plumber detects CI/CD security issues in your GitHub workflows and gives you a score

CI/CD Security Analyzer

Static analysis for GitHub Actions (and more)

Runtime Security Solution for your CI/CD Pipeline

A CI/CD Red Team Framework for demonstrating Build Pipeline security risks.

Open-source eBPF runtime security sensor for GitHub Actions and GitLab CI/CD.

📚 A curated list of awesome CI CD security resources

Nord Stream is a tool that allows you to extract secrets stored inside CI/CD environments by deploying malicious pipelines. It currently supports Azure DevOps, GitHub and GitLab.