All activity
![Chris Jacob Abraham](https://ph-avatars.imgix.net/4245096/94a3cc34-d822-483e-9b95-a23bf73b000f.jpeg?auto=compress&codec=mozjpeg&cs=strip&auto=format&w=48&h=48&fit=crop&frame=1)
GitGoat is an open source tool built to enable DevOps and Engineering teams to design and implement a sustainable misconfiguration prevention strategy. It can be used to test products with access to GitHub repos without a risk to your production data.
![GitGoat](https://ph-files.imgix.net/344542dd-8f3a-4c3f-8d6c-3028c16a11a3.png?auto=compress&codec=mozjpeg&cs=strip&auto=format&w=48&h=48&fit=crop&frame=1)
GitGoat
Intentionally Misconfigured GitHub User + Repo + Teams Data
![Chris Jacob Abraham](https://ph-avatars.imgix.net/4245096/94a3cc34-d822-483e-9b95-a23bf73b000f.jpeg?auto=compress&codec=mozjpeg&cs=strip&auto=format&w=48&h=48&fit=crop&frame=1)
Software supply chain attacks have caught the security community off-guard. Arnica, starting with GitHub & Azure DevOps, addresses the two primary root causes:
1) 🪄 excessive permissions to developer tools
2) 🥸 lack of abnormal behavior detection
1) 🪄 excessive permissions to developer tools
2) 🥸 lack of abnormal behavior detection
Arnica
Behavior based software supply chain security