CI/CD Attacks
A curated collection of offensive security research, techniques, and tools for attacking CI/CD pipelines and software supply chains.
What is CI/CD Attacks?
Awesome CI/CD Attacks is a curated, open-source repository of offensive security research focused on continuous integration and continuous deployment (CI/CD) pipelines and software supply chains. It aggregates techniques, tools, case studies, and resources for identifying and exploiting vulnerabilities in the systems used to develop, build, test, and deploy software. The project serves as a centralized knowledge base for understanding how attackers can compromise modern development workflows.
Security researchers, red teamers, penetration testers, and DevSecOps professionals who need to understand offensive CI/CD tactics to assess the security of their own pipelines or conduct authorized security testing.
It provides a uniquely comprehensive and curated collection of real-world attack methods and resources specifically for CI/CD environments, saving researchers time from scouring disparate sources. The focus on practical, offensive techniques makes it an essential reference for building realistic threat models and effective defenses.
Overview
Practical resources for offensive CI/CD security research. Curated the best resources I've seen since 2021.
Use Cases
Best For
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
