kondukto-io/kntrl

Open-source eBPF runtime security sensor for GitHub Actions and GitLab CI/CD.

Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.

Runtime Security Solution for your CI/CD Pipeline

A multi-platform CI/CD vulnerability detection and attack automation tool for identifying security weaknesses in pipeline configurations.

A CI/CD Red Team Framework for demonstrating Build Pipeline security risks.

poutine, a supply chain vulnerability scanner for build pipelines

CI/CD Security Analyzer

Static analysis for GitHub Actions (and more)

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).