GitHub - cicd-sensor/cicd-sensor: Open-source eBPF runtime security sensor for GitHub Actions and GitLab CI/CD.

When a compromised dependency in a CI/CD job steals your cloud credentials and leaks them, would you catch it? Would you have the logs to investigate afterward? cicd-sensor is an open-source sensor that lets every team answer both. Detection: Detects supply-chain attacks at runtime using process ancestry (e.g. credential access from a process descended from npm install) and correlation across sign

[ryuichi1208]

“cicd-sensor”

[efcl]

GitHub Actions/GitLab CI/CD向けのeBPFを使ったランタイムセキュリティ監査ツール CI/CDジョブ内のプロセス実行やファイルアクセスを収集し、ルールで検知やログ出力ができる。 GitHub ActionsとGitLab CI/CDに対応し、ログはS3/GCS/Pub/Subな

[Xibalba]

きになる

[nguyen-oi]

eBPFを使ったCI/CD向けのEDR。GitHub Actions/GitLab CIでのサプライチェーン攻撃検知にかなり強力そう。OSSなのも良い