Browse the full catalog of hands-on environments.
Move hardcoded application secrets into a managed secret store issuing short-lived dynamic credentials, and confirm that a stolen credential expires before it is useful.
Steal pipeline credentials through a malicious build step and a poisoned dependency, then lock the pipeline down with scoped tokens, isolated runners and protected environments.
An AWS credential is sitting in your Git history. Detect it with gitleaks, rotate it, purge it from every commit with git filter-repo, and add the local and pipeline controls that stop it coming back.
