Owner

boostsecurityio

4 indexed repositories · View on GitHub

poutine
poutine, a supply chain vulnerability scanner for build pipelines

Go · 513 stars
smokedmeat
A CI/CD Red Team Framework for demonstrating Build Pipeline security risks.

Go · 379 stars
bagel
bagel, a CLI that inventories security-relevant metadata on developer workstations

Go · 196 stars
lotp
Supply Chain Security Research - Living Off The Pipeline tools

HTML · 164 stars

Open All

[LOTP] Add node-gyp Open

idea

boostsecurityio/lotp#133 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Support quoted Bash heredoc injection with delimiter-aware sink extraction Open

enhancement

boostsecurityio/smokedmeat#51 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
LOTP: pip with requirements.txt is not functional Open

bug

boostsecurityio/smokedmeat#53 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
LOTP: support subdirectory-aware targets for path-gated workflow repos Open

enhancement

boostsecurityio/smokedmeat#54 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
security: RegisterRoutes installs all sensitive routes without middleware - latent footgun Open

security

boostsecurityio/smokedmeat#63 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 14, 2026
workflow_dispatch wizard allows any character on the boolean input Open

bug

boostsecurityio/smokedmeat#80 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Duplicate vulnerabilities in Menu under certain scenarios Open

bug

boostsecurityio/smokedmeat#81 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Browser view on job Open

enhancement

boostsecurityio/smokedmeat#88 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Modernize SmokedMeat through behavior-preserving architecture iterations Open

architecture

boostsecurityio/smokedmeat#96 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Modernization 1: define Analysis ingestion architecture Open

architecture

boostsecurityio/smokedmeat#98 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 14, 2026
Modernization 1: implement canonical Analysis ingestion Open

architecture ready-for-agent

boostsecurityio/smokedmeat#106 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Build durable Pantry committed-state transactions Open

architecture ready-for-agent

boostsecurityio/smokedmeat#107 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Make GraphHub publication revision-safe Open

architecture ready-for-agent

boostsecurityio/smokedmeat#108 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Make Repository Analysis outcomes canonical Open

architecture ready-for-agent

boostsecurityio/smokedmeat#109 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Implement canonical Analysis reconciliation Open

architecture ready-for-agent

boostsecurityio/smokedmeat#110 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Make Kitchen own the Analysis run lifecycle Open

architecture ready-for-agent

boostsecurityio/smokedmeat#111 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Make Counter consume canonical Analysis state Open

architecture ready-for-agent

boostsecurityio/smokedmeat#112 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026

boostsecurityio

Get new issues in your inbox