Securing CI and CD servers is essential. Establishing security controls is critical to securing the pipelines, as they are a bridge between the source code and the production servers.
Continuous integration server penetration testing
Rotten Apple project for testing continuous integration or continuous delivery system security
The Rotten Apple project is an open source project developed with the aim of giving developers and penetration testers an easy and efficient experience when testing CI servers, by delivering various features and capabilities.
You can clone the project from its GitHub repository by typing sudo git clone https://github.com/claudijd/rotten_apple.