Raven: Open-source CI/CD pipeline security scanner

Raven (Risk Analysis and Vulnerability Enumeration for CI/CD) is an open-source CI/CD pipeline security scanner that makes hidden risks visible by connecting the dots across vulnerabilities woven throughout the pipeline that, when viewed collectively, reveal a much greater risk than when assessed as one-off CVEs. Raven boosts the ability of security teams to implement secure software development practices, enabling them to work more strategically with DevOps teams while maturing their organization’s ASPM capabilities. How Raven … More →

The post …

analysis cd pipeline cves cybersecurity cycode don't miss enumeration github hidden open source pipeline pipeline security raven risk risk analysis risks scanner scanning security security scanner security teams teams visible vulnerabilities vulnerability