A curated list of awesome CI CD security resourcesWhat's in the list
81 links in 13 sections, with live GitHub stats.activeno commit in 2y
Books
Guidelines
Blogs / General
Top 10 CI/CD Security RisksBlogs / Azure DevOps Server
Azure DevOps server supply-chain attack tree (map, Attack surface, threat modeling)Blogs / GitLab
Blogs / GitHub Actions
Blogs / Jenkins
Blogs / ArgoCD
Videos
Repositories
Threat Matrix for CI/CD Pipeline
Jenkins Attack Framework
pwn_jenkinsTools
Gato
A tool that helps blue teamers and offensive security practitioners find weaknesses in GitHub organization's public and private repositories
clank
Simple tool that allows you to detect imposter commits in GitHub Actions workflows
legitify
Detect and remediate misconfigurations and security risks across all your GitHub and GitLab assets
poutine
A security scanner that detects misconfigurations and vulnerabilities in the build pipelines of a repository
Harden-Runner
Network egress filtering and runtime security for GitHub-hosted and self-hosted runners
Cimon
Runtime security solution for your CI/CD pipeline
A powerful security tool designed to perform massive scans for GitHub Actions CI workflows and digest the discovered data into a Neo4j database
Playground
CI/CD GoatCases
Nothing in this list matches your filter.