ghtier
← Threat landscape

NIST SP 800-204D

Version February 2024. Each row lists the incidents on ghtier that ghtier maps to it. The mapping is ghtier's own reading, not the framework author's. Read the framework

ItemIncidentsLast 12 monthsMost recent
5.1.1 Secure build62Actions cache poisoning (Angular, TanStack)
5.1.2 Secure pull-push operations on repositories74ChainDrop: a hijacked maintainer account publishes through trusted publishing
5.1.3 Integrity of evidence generation during software updates52ChainDrop: a hijacked maintainer account publishes through trusted publishing
5.1.4 Secure code commits63ChainDrop: a hijacked maintainer account publishes through trusted publishing
5.2 Securing workflows in CD pipelines00None
5.2.1 Secure CD pipeline: GitOps case study00None
5.3 Implementation strategy62GitHub's internal repositories taken through a VS Code extension

Other frameworks

OWASP Top 10 CI/CD Security RisksSLSA, OpenSSF Scorecard, the CIS benchmark, NIS2 and DORA are planned.