cicd-goat
jenkins-update-center
| cicd-goat | jenkins-update-center | |
|---|---|---|
| 17 | 1 | |
| 1,806 | 38 | |
| 1.2% | - | |
| 5.0 | 9.5 | |
| 28 days ago | 2 days ago | |
| Python | Python | |
| Apache License 2.0 | MIT License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
cicd-goat
-
CI/CD Access All Areas?
In this blog post, we want to explore what happens if a development machine gets compromised, granting an attacker write access to source code repositories. To experience this first-hand, we're using CI/CD Goat, and one of the CTF challenges to play through the scenario of an attacker gaining access to sensitive data within build infrastructure.
- New challenge added to the CI/CD Goat CTF
-
DevSecOps Newbie
CI/CD-Goat: https://github.com/cider-security-research/cicd-goat
- CI/CD Goat - A deliberately vulnerable environment made to educate on CI/CD security
jenkins-update-center
-
local update server - complains about digest?
I have not found any solutions to this part of the "corporate jenkins update site" instructions/recommendations found in several sites: https://github.com/ikedam/backend-update-center2/wiki/How-to-create-your-own-Jenkins-Update-Center https://github.com/lework/jenkins-update-center https://medium.com/@prabhas.gupte/how-to-setup-custom-jenkins-update-center-d4bd6d3772d5 https://www.north-47.com/knowledge-base/update-jenkins-plugins-behind-a-corporate-proxy/ https://www.jenkins.io/blog/2015/07/14/juseppe-a-custom-update-site-for-jenkins/ https://support.cloudbees.com/hc/en-us/articles/115000494608-Why-is-there-Failed-Signature-Check-when-using-update-server-
What are some alternatives?
apicheck - The DevSecOps toolset for REST APIs
update-center2 - Jenkins Update Center backend
github-leak-audit - A GitHub workflow to identify employees that have leaked your organization's code
backend-update-center2 - Update center backend
dockerfile-security - Static security checker for Dockerfiles
pwn_jenkins - Notes about attacking Jenkins servers
packj - Packj stops :zap: Solarwinds-, ESLint-, and PyTorch-like attacks by flagging malicious/vulnerable open-source dependencies ("weak links") in your software supply-chain
docker-android - Android in docker solution with noVNC supported and video recording
sbt-dependency-check - SBT Plugin for OWASP DependencyCheck. Monitor your dependencies and report if there are any publicly known vulnerabilities (e.g. CVEs). :rainbow:
nagios-plugins - 450+ AWS, Hadoop, Cloud, Kafka, Docker, Elasticsearch, RabbitMQ, Redis, HBase, Solr, Cassandra, ZooKeeper, HDFS, Yarn, Hive, Presto, Drill, Impala, Consul, Spark, Jenkins, Travis CI, Git, MySQL, Linux, DNS, Whois, SSL Certs, Yum Security Updates, Kubernetes, Cloudera etc...
faraday - Open Source Vulnerability Management Platform
taurus - Automation-friendly framework for Continuous Testing by