2 repositories on SrcLog
poutine, a supply chain vulnerability scanner for build pipelines
A CI/CD Red Team Framework for demonstrating Build Pipeline security risks.