Harden the build→release path against artifact tampering by establishing signing and provenance (CICD-SEC-4/9, SLSA).
Free
Details
This publisher has an account here and has not listed a server yet.
Security & Testing · Cloud & DevOps · Developer Tools & Repos
0 + 129
servers + skills
3 categories
—
installs
across every listing
0
followers
told when a release lands
—
average rating
no reviews yet
129 agent skills — instructions the agent loads on demand. 129 of 129 are free. Median context cost 1.3k tokens.
Close Insufficient Logging & Visibility (CICD-SEC-10) with comprehensive, tamper-resistant CI/CD audit logging and alerting.
Free
Details
Demonstrate Insufficient Flow Control (CICD-SEC-1) during an authorized assessment — pushing code, config, or artifacts through the…
Free
Details
Harden a CI/CD delivery pipeline against Insufficient Flow Control (CICD-SEC-1).
Free
Details
Harden CI/CD identity & access management against CICD-SEC-2.
Free
Details
Demonstrate Inadequate Identity & Access Management (CICD-SEC-2) during an authorized assessment — abusing over-permissioned, stale, or…
Free
Details
Demonstrate Insufficient Logging & Visibility (CICD-SEC-10) during an authorized assessment — showing that malicious activity in the CI/CD…
Free
Details
Demonstrate Insufficient Pipeline-Based Access Controls (CICD-SEC-5) during an authorized assessment — abusing the fact that a running…
Free
Details
Harden Pipeline-Based Access Controls against CICD-SEC-5.
Free
Details
Demonstrate CI/CD secret exfiltration (CICD-SEC-6, Insufficient Credential Hygiene) during an authorized assessment — recovering pipeline…
Free
Details
Detect and prevent CI/CD secret exposure (CICD-SEC-6).
Free
Details
Govern third-party services in the CI/CD ecosystem against CICD-SEC-8.
Free
Details
Authentication
0 of 0 use OAuth
The rest either hold an API key issued by the publisher or ask for nothing.
Support
Community publisher
Listed without a verification tick. Read the listing before installing.