CycodeLabs/cimon-action

Open-source eBPF runtime security sensor for GitHub Actions and GitLab CI/CD.

Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.

CI/CD Security Analyzer

Plumber detects CI/CD security issues in your GitHub workflows and gives you a score

Static analysis for GitHub Actions (and more)

kntrl is an eBPF based runtime agent that monitors and prevents anomalous behaviour defined by you on your pipeline. kntrl achieves this by monitoring kernel calls, and denying access as soon as your defined behaviour is detected. For more: https://kntrl.dev

A multi-platform CI/CD vulnerability detection and attack automation tool for identifying security weaknesses in pipeline configurations.

poutine, a supply chain vulnerability scanner for build pipelines

A CI/CD Red Team Framework for demonstrating Build Pipeline security risks.