Messy poutine, a GitHub organization demonstrating ⚠️ purposely vulnerable build pipelines⚠️ .

This project was created and is maintained by BoostSecurity, a Montreal-based startup, the makers of the poutine scanner (https://github.com/boostsecurityio/poutine)

This is a Capture The Flag (CTF)! Submit flags through private vulnerabilities report UI.

Most of the challenges can be found in https://github.com/messypoutine/gravy-overflow