What is CI/CD Goat
A comprehensive guide to digital forensics and incident response, covering incident response frameworks, digital forensic techniques, and threat intelligence.
The CI/CD Goat Project: A Hands-On Approach to CI/CD Security
The CI/CD Goat project enables engineers and security practitioners to learn and practice CI/CD security through a series of 11 challenges. These challenges are conducted within a real, fully operational CI/CD environment.
The scenarios vary in difficulty levels...
The scenarios vary in difficulty levels, with each scenario concentrating on a single primary attack vector.
The Challenges Cover the Top 10 CI/CD Security Risks
The challenges encompass the Top 10 CI/CD Security Risks, which include Insufficient Flow Control Mechanisms, PPE (Poisoned Pipeline Execution), Dependency Chain Abuse, PBAC (Pipeline-Based Access Controls), and several others.
The Various Challenges Inspired by Alice in Wonderland
The various challenges draw inspiration from Alice in Wonderland, with each one themed around a different character.
The project’s environment is based on Docker containers for local execution
The project’s environment utilizes Docker containers, allowing it to be executed locally.
Overview of Container Types
The containers include Gitea (a minimal Git server), Jenkins, a Jenkins agent, LocalStack (a cloud service emulator that operates within a single container), and Prod (which contains Docker in Docker along with the Lighttpd service).
CI/CD Goat Reviews
No reviews yet.
