Attack Simulator
Simulate past supply chain attacks such as SolarWinds
, Codecov
, and ua-parser-js
and see how Harden-Runner
stops them. Harden-Runner GitHub Action installs a security agent on the GitHub-hosted runner (Ubuntu VM) to
- Prevent exfiltration of credentials
- Detect tampering of source code during build
- Enable running jobs without sudo access
Weekly instructor-led session
While you can follow the hands-on tutorials on your own, you can also attend a free weekly instructor-led session. Register here.
Attack Simulations
This table lists the different attack methods you can simulate. In each case, you then use Harden-Runner
to stop the attack.