Nord Stream

Covers Azure DevOps, GitHub Actions, and GitLab CI, allowing security assessments across the most common CI/CD providers without switching tools.

Includes OIDC token extraction for Azure and AWS, plus branch protection bypass, enabling simulation of sophisticated real-world attacks.

Allows deployment of arbitrary YAML pipelines via the --yaml option, so users can tailor exploits to specific environments or test custom scenarios.

Automatically cleans up pipeline logs post-exploitation (where possible), reducing detection risk during security engagements, as shown in the log cleanup examples.