keyguard

keyguard Scan codebases, GCP projects, and CI pipelines for exposed Google API credentials — before they get exploited. The problem: Google retroactively enabled Gemini API access on existing API keys Maps, Places, etc. that were designed to be public and embedded in client-side code. When someon...

GitLeaks

GitLeaks GitLab CI Component A GitLab CI component for Gitleaks - a SAST tool for detecting and preventing hardcoded secrets like passwords, API keys, and tokens in git repos. Features Secret Detection : Scans repositories for hardcoded secrets and sensitive information Comprehensive Rules :...

A Deterministic and Auditable AI Security Risk Assessment Framework with ATLAS Aligned Executable Rules and Formal Verification

Artificial intelligence systems are increasingly deployed in high impact and safety critical settings, yet security assessment remains difficult to reproduce and defend under audit. Existing approaches often rely on narrative checklists or assessor driven scoring, and they lack an explicit, machi...

cifswitch-check

cifswitch-check 리눅스 시스템이 CIFSwitchCVE-2026-46243에 노출되어 있는지 확인하는 셸 스크립트입니다. CIFSwitch는 2007년부터 존재해 온 리눅스 커널 CIFS/SMB 클라이언트의 로컬 권한 상승 취약점입니다. 베어메탈 호스트, VM, 컨테이너 내부에서 실행됩니다. CI/CD 파이프라인에 바로 적용할 수 있도록 설계되었습니다. 배경 CIFSwitch는 보안 연구원 Asim Manizada가 2026년 5월 28일에 공개했습니다. 이 결함은 커널의 cifs.spnego 키 유형에 대한 입력...

trivy

Trivy GitLab CI Component A GitLab CI component for Trivy — the all-in-one security scanner covering container images, filesystems, repositories, Kubernetes clusters, SBOMs, and license compliance. Plug these templates directly into your pipelines to get repeatable scans, GitLab-native reports, a...

trivysupplychainanalysis

Quantitative Analysis of Multi-Stage CI/CD Supply-Chain Attacks 형식적으로 검증되고 정량적으로 재구성된 2026년 3월 Trivy / "TeamPCP" GitHub Actions 공급망 침해 CVE-2026-33634 — TLA+로 모델링, TLC로 철저히 확인, PRISM 확률 모델 검사기로 정량화. 논문의 모든 숫자는 이 저장소에서 재생성됩니다. 모델, 확률, 코퍼스 측정값, 보정 모두 레이어당 단일 명령어로 소스에서 재현됩니다. 발생한 일과 이를 통해 입증된 것 널리 사용...

coeus-ci

Coeus CI 모든 것을 보는 경쟁 인텔리전스. CoeusSEE-us라는 이름은 탐구하는 정신을 지닌 100개의 눈을 가진 그리스 티탄에서 유래했으며, 그 이름은 문자 그대로 "질문하기"라는 뜻입니다. CI는 Competitive Intelligence경쟁 인텔리전스를 의미합니다. 무료 공개 데이터 소스에서 기업 프로필을 구축하는 비즈니스 인텔리전스 OSINT 도구입니다. 도메인을 입력하면 안정성, 성장, 기술 성숙도, 재무 건전성, 보안 태세, 투명성을 포괄하는 점수 보고서를 돌려받습니다. 빠른 시작 Clone and...

GitLeaks

GitLeaks Container Image Opinionated gitleaks build for secret scanning in local workflows and pipelines. Features Builds gitleaks from the tagged upstream source with pinned Go toolchains for reproducible binaries. GitLab CI Component at niclas-zone/ci/gitleaks. Usage Pull the image podman pull...

CVE-2026-4523 Missing Authorization in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an unauthenticated user to read CI/CD job trace contents containing sensitive variable values due to improper...

BIT-GITLAB-2026-93577 Integer Overflow or Wraparound in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary code on the GitLab server due to an integer overflow issue when...

BIT-GITLAB-2026-92470 Missing Authorization in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 18.7 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to access sensitive CI/CD variable values from debug-mode job traces through the Duo AI...

BIT-GITLAB-2026-89078 Double Free in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary code on the GitLab server due to a double free issue when parsing a...

PT-2026-102740

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary code on the GitLab server due to an integer overflow issue when...

PT-2026-102734

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary code on the GitLab server due to a double free issue when parsing a...

FreeBSD: VID-3f11e437-b7cd-11f1-a883-2cf05da270f3 (CVE-2026-4523): Gitlab -- vulnerabilities

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an unauthenticated user to read CI/CD job trace contents containing sensitive variable values due to improper...

PT-2026-102735

GitLab has remediated an issue in GitLab EE affecting all versions from 18.7 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to access sensitive CI/CD variable values from debug-mode job traces through the Duo AI...

GitLab 15.11 < 19.2.7 / 19.3 < 19.3.3 / 19.4 < 19.4.1 (CVE-2026-4523)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an...

Malicious code in figlet-chalk-render (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5ccd0a988525d8128b520a46c4271e26ae5fe2f99accf28f37d4c7370b66de4 On every require'figlet-chalk-render', a top-level IIFE queries https://registry.npmjs.org/figlet-chalk-render/latest and, if a newer version exists,...

MAL-2026-17226 Malicious code in figlet-chalk-render (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5ccd0a988525d8128b520a46c4271e26ae5fe2f99accf28f37d4c7370b66de4 On every require'figlet-chalk-render', a top-level IIFE queries https://registry.npmjs.org/figlet-chalk-render/latest and, if a newer version exists,...

CVE-2019-1003000_RCE-DETECTION

CVE-2019-1003000RCE-DETECTION General Summary Chaining vulnerability CVE-2018-1000861 with CVE-2019-1003000, I created a module to test for a Pre-Auth RCE on Jenkins CI. Initially, I had tried to go about detecting the vulnerability with a username and password and job name; however, I thought it...