boostsecurityio/smokedmeat

CI/CD Security Analyzer

A multi-platform CI/CD vulnerability detection and attack automation tool for identifying security weaknesses in pipeline configurations.

Runtime Security Solution for your CI/CD Pipeline

Nord Stream is a tool that allows you to extract secrets stored inside CI/CD environments by deploying malicious pipelines. It currently supports Azure DevOps, GitHub and GitLab.

Plumber detects CI/CD security issues in your GitHub workflows and gives you a score

Open-source eBPF runtime security sensor for GitHub Actions and GitLab CI/CD.

GitHub Actions Goat: Deliberately Vulnerable GitHub Actions CI/CD Environment

Static analysis for GitHub Actions (and more)

poutine, a supply chain vulnerability scanner for build pipelines