Containers & DevSecOps CI/CD Pipeline Attacks and Supply-Chain Risk
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
CI/CD
Containers & DevSecOps 
Containers & DevSecOps Preventing and Remediating Secrets in Source Control
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Containers & DevSecOps Dependency Confusion and Package-Manager Security
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Containers & DevSecOps Software Bill of Materials (SBOM) in Practice
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Tools & Defense Detection-as-Code with Sigma and CI/CD
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Containers & DevSecOps Attacking CI/CD Pipelines: Exploiting GitHub Actions and Jenkins
A practical offensive and defensive walkthrough of pwn requests, PPE, secrets exfiltration, and OIDC abuse in GitHub Actions and Jenkins.
Containers & DevSecOps Secrets Management and Hunting Leaked Secrets in Git
Hunt leaked credentials in git history with gitleaks and trufflehog, then lock them down with HashiCorp Vault.