All pull requests

Pull requests

• Brew formula update for stratus-red-team version v2.38.0

  #1011·dd-octo-sts[bot] opened Nov 4, 2026Bot·

  ·

• fix(deps): vuln minor: golang.org/x/net · patch: github.com/go-jose/go-jose/v4 [examples/s3-remote-state/go.mod]

  adms-dependency-updateadms-goadms-high-severityadms-medium-severityadms-minor-updateadms-mode-all-vulnsbot_family:adms-dependency-updatecampaigner-automated-change
  #1000·gh-worker-campaigns-3e9aa4[bot] opened Nov 2, 2026Bot·4 tasks·

  ·

• chore(deps): bump alpine from 3.24.1 to 3.24.3

  dependenciesdocker
  #999·dependabot[bot] opened Nov 1, 2026Bot·

  ·

• chore(deps): golang.org/x/net (minor → v0.61.0) [v2/go.mod]

  adms-dependency-updateadms-goadms-minor-updateadms-mode-all-vulnsbot_family:adms-dependency-updatecampaigner-automated-change
  #997·gh-worker-campaigns-3e9aa4[bot] opened Oct 26, 2026Bot·4 tasks·

  ·
  1

• Brew formula update for stratus-red-team version v2.37.1

  #994·dd-octo-sts[bot] opened Oct 15, 2026Bot·

  ·

• build(deps): bump actions/setup-go from 6.5.0 to 7.0.0

  dependenciesgithub_actions
  #955·dependabot[bot] opened Sep 1, 2026Bot·

  ·

• build(deps): bump DataDog/dd-octo-sts-action from 1.0.4 to 1.0.5

  dependenciesgithub_actions
  #954·dependabot[bot] opened Sep 1, 2026Bot·

  ·

• build(deps): bump docker/login-action from 4.1.0 to 4.6.0

  dependenciesgithub_actions
  #953·dependabot[bot] opened Sep 1, 2026Bot·

  ·

• build(deps): bump step-security/harden-runner from 2.16.0 to 2.21.1

  dependenciesgithub_actions
  #952·dependabot[bot] opened Sep 1, 2026Bot·

  ·

• build(deps): bump github/codeql-action/upload-sarif from 4.36.2 to 4.37.9

  dependenciesgithub_actions
  #951·dependabot[bot] opened Sep 1, 2026Bot·

  ·

• feat(aws): add cognito-refresh-token-reuse persistence technique

  #950·lemon0333 opened Aug 30, 2026·

  ·
  1

• Bump golang from 1.25.9-alpine3.22 to 1.26.4-alpine3.22

  dependenciesdocker
  #889·dependabot[bot] opened Jul 1, 2026Bot·

  ·
  2

• Add JSON output format (--output json) for list, status, and show

  kind/enhancement
  #888·Muhammaduazir69 opened Jun 30, 2026·

  ·
  1

  2

  

• core(config), cli(all) - Expose S3 remote state in CLI via flags, env vars, and config file

  #835·Minosity-VR opened Apr 8, 2026Collaborator·

  ·

• New attack technique: Overwrite a Cloud Function with Malicious Code (gcp.persistence.overwrite-cloud-function)

  #809·Minosity-VR opened Mar 26, 2026Collaborator·5 tasks done·

  ·

• New attack technique: Create Workload Identity Federation Pool and Provider (gcp.persistence.create-workload-identity-federation)

  #808·Minosity-VR opened Mar 26, 2026Collaborator·5 tasks done·

  ·

• New attack technique: Backdoor a Cloud Function (gcp.persistence.backdoor-cloud-function)

  #807·Minosity-VR opened Mar 26, 2026Collaborator·5 tasks done·

  ·

• New attack technique: Delete GCS Objects Individually (gcp.impact.ransomware-gcs-individual-deletion)

  #806·Minosity-VR opened Mar 26, 2026Collaborator·4 of 5 tasks·

  ·

• New attack technique: Encrypt GCS Objects Client-Side (gcp.impact.ransomware-gcs-client-side-encryption)

  #805·Minosity-VR opened Mar 26, 2026Collaborator·4 of 5 tasks·

  ·

• New attack technique: Delete All GCS Objects in Batch (gcp.impact.ransomware-gcs-batch-deletion)

  #804·Minosity-VR opened Mar 26, 2026Collaborator·4 of 5 tasks·

  ·

• New attack technique: Invoke Vertex AI Model (gcp.impact.invoke-vertex-ai-model)

  #803·Minosity-VR opened Mar 26, 2026Collaborator·4 of 5 tasks·

  ·

• New attack technique: Open Ingress Port 22 on a Firewall Rule (gcp.exfiltration.open-port-22-ingress)

  #801·Minosity-VR opened Mar 26, 2026Collaborator·5 tasks done·

  ·

• New attack technique: Backdoor a GCS Bucket via Overly Permissive IAM Policy (gcp.exfiltration.backdoor-gcs-bucket)

  #800·Minosity-VR opened Mar 26, 2026Collaborator·5 tasks done·

  ·

• New attack technique: Execute Commands on GCE Instances via OS Config Agent (gcp.execution.os-config-run-command)

  #799·Minosity-VR opened Mar 26, 2026Collaborator·4 of 5 tasks·

  ·
  1

• New attack technique: Modify a GCE Instance Startup Script (gcp.execution.modify-gce-startup-script)

  #797·Minosity-VR opened Mar 26, 2026Collaborator·5 tasks done·

  ·
  6