skillrank_skill ▸ wgpsec/cicd-pipeline-attackMIT · open registry

skill detail

← registry

Cicd Pipeline Attack

wgpsec/cicd-pipeline-attack

CI/CD 流水线与供应链攻击方法论。当发现目标使用 GitHub Actions/Jenkins/GitLab CI/CircleCI/Terraform Cloud/Atlantis 等 CI/CD 系统、需要测试流水线安全性、或发现 .github/workflows/Jenkinsfile/.gitlab-ci.yml 等配置文件时使用。覆盖 PPE（Poisoned Pipeline Execution）三种攻击模式（D-PPE/I-PPE/3PE）、VCS 代码仓库攻击面（代码泄露/Webhook...

communityprovisionaldevopsgithubactionsjenkins

skillrank score

███████░░░░░░░░░43

SkillRank score blends community stars, real usage, and our eval lift; provisional until a skill is evaluated -- so popularity alone can't reach the top tier.

source

★ 1.6k

wgpsec/AboutSecurity

skills/cloud/cicd-pipeline-attack

open on GitHub ▸

eval status

eval pending

Success delta, token delta, and trial count are not available yet. No eval number is shown until this skill has measured results.

install

$ skillrank install wgpsec/cicd-pipeline-attack
$ curl -fsSL skillrank.dev | sh