cider-security-research/cicd-goat

A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.

appseccicdctfdevopsdevsecopsgitlabinfosecjenkinssecurity

License & maintenance

Apache-2.0 is a permissive license: free to use commercially with attribution.

Last code push 2 years ago.

	Repository	Stars	Language	License	Activity
1	bytebase/bytebaseDatabase governance built for humans and agents — controlling changes and access across every major database.	★ 14.6k	Go	Other	Active
2	KeygraphHQ/shannonShannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploit	★ 49.1k	TypeScript	AGPL-3.0	Active
3	OWASP/CheatSheetSeriesThe OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.	★ 33.7k	JavaScript	CC-BY-SA-4.0	Active
4	trufflesecurity/trufflehogFind, verify, and analyze leaked credentials	★ 28.6k	Go	AGPL-3.0	Active
5	getsops/sopsSimple and flexible tool for managing secrets	★ 23.4k	Go	MPL-2.0	Active
6	zaproxy/zaproxyThe ZAP by Checkmarx Core project	★ 16k	Java	Apache-2.0	Active
7	juice-shop/juice-shopOWASP Juice Shop: Probably the most modern and sophisticated insecure web application	★ 14.1k	TypeScript	MIT	Active
8	digininja/DVWADamn Vulnerable Web Application (DVWA)	★ 13.9k	PHP	GPL-3.0	Active