1389 matches found
Snyk Scan
Bitbucket Pipelines Pipe: Snyk This pipe uses Snyk to find, fix and monitor known vulnerabilities in your app dependencies and docker image. YAML Definition Add the following snippet to the script section of your bitbucket-pipelines.yml file: - pipe: snyk/snyk-scan:1.0.2 variables: SNYKTOKEN: ""...
ai-llm-red-team-handbook
AI / LLM Red Team Field Manual & Consultant's Handbook A comprehensive operational toolkit for conducting AI/LLM red team assessments on Large Language Models, AI agents, RAG pipelines, and AI-enabled applications. This repository provides both tactical field guidance and strategic consulting...
nushell
Nushell A new type of shell. Table of Contents Status Learning About Nu Installation Configuration Philosophy Pipelines Opening files Plugins Goals Officially Supported By Contributing License Status This project has reached a minimum-viable-product level of quality. Many people use it as their...
sonarcloud-scan
Bitbucket Pipelines Pipe: SonarQube Cloud scan Scan your code with SonarQube Cloud to detects bugs, vulnerabilities and code smells in more than 25 programming languages. Your SonarCloud account must first be associated to your Bitbucket team or user account. SonarQube Cloud is totally free for...
DeepZero
Automated vulnerability research pipeline engine Define pipelines as YAML. DeepZero handles orchestration, parallelism, fault tolerance, and state. English | 简体中文 | Français 🔗 Pipeline-as-YAML - chain ingest, filter, transform, and LLM-assess stages declaratively ⚡ Parallel execution -...
dockle
Dockle - Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start Dockle helps you: 1. Build Best Practice Docker images 2. Build secure Docker images Checkpoints includes CIS Benchmarks $ brew untap goodwithtech/dockle who use 0.1.16 or older version $ bre...
git-secrets-scan
Bitbucket Security: Secret Scanner Scans your files for hardcoded secrets, keys, and passwords. Creates a security Code Insights report if found. This Bitbucket Cloud supported Pipe leverages the gitleaks secret pattern registry to provide industry-leading Security Secrets Scanning capabilities t...
ecs-templates
Overview This repository contains everything necessary to convert Corelight or Zeek Logs into the Elastic Common Schema ECS naming standard and store them into an Elastic Stack deployment. Originally released in 2019, the same year as Elastic Common Schema, this repository is stil actively...
ci-supplychain-guard
CI Supply Chain Guard A static analysis tool for detecting malicious dependencies in CI/CD pipelines before they're merged into your codebase. Author: Otsmane Ahmed Status: Research Prototype v1.0 Quick Start 1. Clone and install git clone https://github.com/Otsmane-Ahmed/ci-supplychain-guard.git...
CVE-2026-114140 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server...
GHSA-PJVX-PRJX-H659 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server...
reconswarm
ReconSwarm ReconSwarm is a modular reconnaissance automation framework designed for distributed security testing. It provisions cloud infrastructure, executes parallel reconnaissance pipelines, and collects results with minimal configuration overhead. ReconSwarm is suitable for bug bounty hunters...
DEFCON-CICD-pipelines-workshop
CI/CD : The new Eldorado ? Abstract CI/CD pipelines are increasingly becoming part of the standard infrastructure within dev teams, with the rise of new approaches such as Infrastructure as Code, the sensitivity level of such pipelines is escalating quickly. In case of compromise, it is not just...
anticipator
Anticipator Runtime security for multi-agent AI systems. Anticipator detects prompt injection, credential leakage, encoding attacks, homoglyph spoofing, path traversal, and anomalous agent behavior across LangGraph pipelines — before they become incidents. No LLMs. No embeddings. No external APIs...
nord-stream
Nord Stream Nord Stream is a tool that allows you extract secrets stored inside CI/CD environments by deploying malicious pipelines. It currently supports Azure DevOps, GitHub and GitLab. Find out more in the following blogpost:...
melange
melange Build apk packages using declarative pipelines. Commonly used to provide custom packages for container images built with apko. The majority of apks are built for use with either the Wolfi or Alpine Linux ecosystems. Key features: Pipeline-oriented builds. Every step of the build pipeline ...
pwnproxy
CI: suite · goldens · perf-check — baseline 281.9ms / 19 pages tests/perf/baseline.json — .github/workflows/ci.yml pwnproxy One security testing engine. Every interface. An open, local-first security testing platform for pentesters, AI agents, CI/CD pipelines, and teams. Security testing is no...
Tylium
Tylium Primary data pipelines for intrusion detection, security analytics and threat hunting These files contain configuration for producing EDR endpoint detection and response data in addition to standard system logs. These configurations enable the production of these data streams using F/OSS...