ci-cd-security

A multi-platform CI/CD vulnerability detection and attack automation tool for identifying security weaknesses in pipeline configurations.

GPU-accelerated secret scanner for code, Git history, containers, cloud, browser assets, and CI. 923 detectors, live verification, CUDA, Metal, WGPU.

Static security scanner and linter for GitLab CI. Finds .gitlab-ci.yml misconfigurations, supply-chain risks, and leaked secrets. Offline, SARIF output, OWASP CICD-SEC and CWE mappings.

Open source attack-path engine for AWS and Kubernetes: correlates your scanners into one graph and blocks the pull request that opens a route to your data.

Defensive static analysis and detection engineering for the 2026 Shai-Hulud npm supply-chain campaign: Sigma/YARA rules, IOCs, ATT&CK mapping, and defender guidance.

Multi-gate open source supply chain trust validation pipeline with zero-day CVE expedited lane

Go supply chain security analysis – finds vulnerabilities, weak maintainers, typosquatting, and CI/CD risks. SBOM + enterprise PDF reports.

Comprehensive guide for configuring Role-Based Access Control (RBAC) in Jenkins using the Role Strategy Plugin.

Offline Jenkins credential decryption tool for post-exploitation, red team operations, and CTFs. Decrypts credentials.xml using master.key and hudson.util.Secret without a running Jenkins instance. Supports legacy and modern encryption formats, with Docker and cross-platform support

Jenkins plugin for Xygeni - End to end software development and delivery security

Git-native secrets manager for teams and AI agents: age encryption, deterministic diffs, leak prevention, secure runtime injection. Dual-licensed MIT OR Apache-2.0.

Production-grade DevSecOps pipeline with automated vulnerability scanning

A rigorous laboratory for DevSecOps Engineering: bridging the gap between SOC analysis and infrastructure security. Documenting the transition through hands-on automation, container hardening, and production-grade security tooling.

Evidence-first prompt toolkit for AI-assisted supply chain security audits across npm, Composer, CI/CD, GitHub Actions, Next.js, Vercel, TanStack, containers, SaaS/OAuth and LGPD incident response.

Next-Gen Automated GitHub CI/CD & Agentic AI Security Auditing and Remediation Engine

Hands-on demo for the OSS Trust Framework — 6 scenarios including live CVE detection, IronWorm and Miasma behavioral pattern matching, and a full zero-day MFA quorum workflow. 131 passing tests · all offline.

AI agent for auditing GitHub Actions workflows for security risks and policy violations, built with Agentic Star.

A battle-tested repository of reusable GitHub Actions workflows, Semgrep custom security policies, Trivy container scanners, and Gitleaks rules for end-to-end CI/CD pipeline defense.

CI/CD security laboratory covering pipeline security, automated security testing, secrets protection, and DevSecOps practices

Pre-clone repo security scanner. Detects obfuscated payloads, hardcoded secrets, Unicode tricks, typo-squatting, CI/CD abuse, and supply-chain attacks before you clone.