Plumber (@getplumber_io) header
Plumber (@getplumber_io) profile picture

Plumber

@getplumber_io
 San Francisco
github.com/getplumber/plumber
Joined November 2020
  • Tweets653
  • Following236
  • Followers4.9K
133Media
Photo by Plumber (@getplumber_io)Photo by Plumber (@getplumber_io)Photo by Plumber (@getplumber_io)Photo by Plumber (@getplumber_io)Photo by Plumber (@getplumber_io)Photo by Plumber (@getplumber_io)Photo by Plumber (@getplumber_io)Photo by Plumber (@getplumber_io)Photo by Plumber (@getplumber_io)Photo by Plumber (@getplumber_io)
The Plumber origin story ⬇️
Thomas Boni (@thomas_boni) profile pictureThomas Boni
@thomas_boniOct 14
Your pipeline has more access than your CTO and gets less review than a typo fix. Meet Plumber: open source, one command, 30 seconds.
2
100
Your pipeline has more access than your CTO and gets less review than a typo fix. Meet Plumber: open source, one command, 30 seconds.
1
3
1
5
292
Plumber: Open-source scanner of GitLab CI/CD pipelines for compliance gaps - helpnetsecurity.com/2026/03/… - @getplumber_io @GitHub #GitHub #GitLab #DevSecOps #CICD #OpenSource #CloudSecurity #CyberSecurity
Plumber: Open-source scanner of GitLab CI/CD pipelines for compliance gaps - Help Net Security

Plumber: Open-source scanner of GitLab CI/CD pipelines for compliance gaps - Help Net Security

Plumber is an open-source GitLab CI/CD compliance scanner that checks container images, branch protection, and pipeline configuration.

helpnetsecurity.com
1
2
368
Building a sovereign cloud? You don't "retrofit" security. You build it in. 🏗️ @NumSpotCloud used Plumber to automate SecNumCloud, HDS & ISO 27001 compliance across their CI/CD pipelines. ✅ Policy-as-Code ✅ Audit-ready ✅ Zero drift Read how👇getplumber.io/blog/numspot-u…
Image from Plumber (@getplumber_io)
1
1
1
96
🚀 Plumber CLI v0.1.66 released 6 releases since v0.1.60 bringing: • Clearer exit codes for CI analysis • New control detecting weakened GitLab security jobs • Config diff to compare effective vs default config • CI security fixes Release notes: github.com/getplumber/plumbe…
Releases · getplumber/plumber

Releases · getplumber/plumber

Plumber detects CI/CD security issues in your GitHub workflows and gives you a score - Releases · getplumber/plumber

github.com
2
2
149
CI/CD pipelines read your code, hold your secrets, and deploy to production. Most orgs have no scalable way to verify they're compliant. We built a 26-point checklist + ISO 27001/NIS2/DORA/CRA mapping to fix that. 👉 getplumber.io/blog/cicd-comp…

CI/CD Compliance Framework for Secure Pipelines | Plumber

Checklist and controls for audit-ready CI/CD compliance (ISO 27001, NIS2, DORA, CRA). Examples, evidence, drift detection, and remediation at scale.

getplumber.io
3
1
4
2,049
🚀 Plumber 1.1 is out! You can now view detailed compliance for each portfolio: 📊 Overall compliance score 🔎 Compliance per policy ⚡ Direct access to related issues Understand governance & security posture faster. 📖getplumber.io/blog/release-1…
Plumber 1.1 Release - What's New

Plumber 1.1 Release - What's New

Introducing Plumber 1.1: portfolio compliance details, and various improvements

getplumber.io
47
🚨An AI bot compromised 5 of 7 major repos in one week (Trivy, awesome-go, Microsoft, DataDog, CNCF). Every exploit was a known CI/CD misconfiguration. The fix isn't patching. It's governance. Full breakdown and lessons learned: getplumber.io/blog/hackerbot…
hackerbot-claw: CI/CD Pipelines Are the New Attack Surface | Plumber

hackerbot-claw: CI/CD Pipelines Are the New Attack Surface | Plumber

An AI bot compromised 5 of 7 major repos in one week via CI/CD misconfigurations. A call to govern, not patch. Why CI/CD compliance and pipeline governance must become standard.

getplumber.io
1
1
96
🆕 Plumber v0.1.47 is out • Override detection for required components & templates (50% compliance reduction if overridden) • Automatic version check (async, skipped in CI) • Config validation on analyze • Selective control execution More info in thread
Image from Plumber (@getplumber_io)
1
1
2
71
🔗 Releases: github.com/getplumber/plumbe… 🔗 GitLab Catalog: gitlab.com/explore/catalog/g… 🔗 Installation guide: github.com/getplumber/plumbe… 🔗 Self-hosted template: github.com/getplumber/plumbe…
Releases · getplumber/plumber

Releases · getplumber/plumber

Plumber detects CI/CD security issues in your GitHub workflows and gives you a score - Releases · getplumber/plumber

github.com
51
🆕 Plumber CLI v0.1.43 is out What's new: • GitLab MR comments with compliance summary • Compliance badge for default branch • Config validation with typo detection (no more silent misconfigs) Update your CLI & component 👇 More info in thread
1
1
1
58
🔗 Releases: github.com/getplumber/plumbe… 🔗 GitLab Catalog: gitlab.com/explore/catalog/g… 🔗 Installation guide: github.com/getplumber/plumbe… 🔗 Self-hosted template: github.com/getplumber/plumbe…
Releases · getplumber/plumber

Releases · getplumber/plumber

Plumber detects CI/CD security issues in your GitHub workflows and gives you a score - Releases · getplumber/plumber

github.com
1
41
Your GitLab Pipelines Are Probably Non-Compliant! 🚨 Here’s How to Fix That in 5 Minutes ⏱️🛠️ getplumber.io/blog/hands-on-…
Your GitLab Pipelines Are Probably Non-Compliant. Here's How to Fix That in 5 Minutes. | Plumber

Your GitLab Pipelines Are Probably Non-Compliant. Here's How to Fix That in 5 Minutes. | Plumber

A hands-on walkthrough of using Plumber to scan your GitLab CI/CD pipelines for compliance issues from install to continuous monitoring in under 5 minutes.

getplumber.io
1
1
55
🚀 R2Devops is now Plumber. We started with CI/CD standardization. We evolved into CI/CD compliance. 👉 Measurable 👉 Auditable 👉 Scalable Assess posture, enforce requirements, fix non-compliance in minutes. Open-source CLI + platform. 👉 getplumber.io
Plumber - CI/CD security posture management | GitHub & GitLab

Plumber - CI/CD security posture management | GitHub & GitLab

Leaking CI/CD pipelines kill your company. Plumber checks every GitHub and GitLab pipeline before it runs, grades it from A to E, and opens the pull request that fixes what it finds.

getplumber.io
2
3
115
🚀 R2Devops 2.14 is here! 🔍 Advanced Search – Quickly find issues to fix 🛠 One-Click Bulk Fix – Auto-fix issues in bulk 🔄 One-Click Bulk Merge – Merge auto-fix MRs in one click 📖 Release notes: docs.r2devops.io/blog/releas…
1
94
🚀 R2Devops 2.13 is here! 🔧 Improved Fix Journey – Real-time tracking & history 📋 Official Catalog Control – Manage CI/CD projects ⚡ Enhanced Performance – 2x faster analysis 🔍 Better Visibility – Clear project scanning status docs.r2devops.io/blog/releas…
1
2
135
🚀 R2Devops 2.12 is here! 📦 GitLab CI/CD Catalog – Discover & manage components 🤖 AWS Bedrock Support – New AI model provider 🔍 Enhanced Issue UI – Cleaner, focused interface ⚡ Project Selection – Improved performance & usability docs.r2devops.io/blog/releas…
1
4
291
📅 Je vous donne RDV mercredi pour une édition spéciale du live stream "Code Connexion" ! J'aurais le plaisir de recevoir Aurélien, le CEO de @r2devops_io qui nous racontera sont parcours d'entrepreneur, et de la création de startup de 0 🔥 Préparerez vos meilleures questions !
Image from Yoan Bernabeu (@yOyO38)
4
1
8
2,746
🚀 R2Devops 2.10 is here! 📦 GitLab Catalog – Track usage & adoption 🔒 MR Compliance – Enforce org-wide policies 📊 Issue Upgrades – Bulk edits, severity, comments 🛠️ One-Click Fixes – Instant compliance resolutions 🔗 docs.r2devops.io/blog/releas…
1
2
107
Does anyone know where I can find the list of all organization flagged as "Verified publisher" on the @docker hub ? @k33g_org maybe ?
2
1
6
306
Load more