Containers & DevSecOps CI/CD Pipeline Attacks and Supply-Chain Risk
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
supply-chain
Containers & DevSecOps 
Containers & DevSecOps Preventing and Remediating Secrets in Source Control
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Containers & DevSecOps Dependency Confusion and Package-Manager Security
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Containers & DevSecOps Software Bill of Materials (SBOM) in Practice
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Containers & DevSecOps Securing the Software Supply Chain: SBOM, Sigstore, and SLSA in Practice
A hands-on guide to attacking and defending the software supply chain with SBOM, cosign, Sigstore, and SLSA.
Containers & DevSecOps Attacking CI/CD Pipelines: Exploiting GitHub Actions and Jenkins
A practical offensive and defensive walkthrough of pwn requests, PPE, secrets exfiltration, and OIDC abuse in GitHub Actions and Jenkins.