https://github.com/rung/threat-matrix-cicd This is an ATT&CK- | Ethical Hacking Tutorials
https://github.com/rung/threat-matrix-cicd
This is an ATT&CK-like matrix focus on CI/CD Pipeline specific risk.
MITRE ATT&CK is a knowledge base of adversary tactics and techniques.
To map the threat of CI/CD Pipeline, I use the same classification as the framework.
#cybersecurity #infosec
More at @EthicalHackX