aurelien coget (@acoget) header
aurelien coget (@acoget) profile picture

aurelien coget

@acoget

Building the open security standard for CI/CD

 San Francisco
getplumber.io
Joined April 2009
  • Tweets447
  • Following207
  • Followers119
8Media
Photo by aurelien coget (@acoget)Photo by aurelien coget (@acoget)Photo by aurelien coget (@acoget)Photo by aurelien coget (@acoget)Photo by aurelien coget (@acoget)Photo by aurelien coget (@acoget)Photo by aurelien coget (@acoget)Photo by aurelien coget (@acoget)
aurelien coget retweeted
Thomas Boni (@thomas_boni) profile picture
Thomas Boni
@thomas_boniOct 28
Day 43 in SF 🪠
Image from Thomas Boni (@thomas_boni)
3
2
13
365
aurelien coget retweeted
Thomas Boni (@thomas_boni) profile picture
Thomas Boni
@thomas_boniOct 26
Trivy, Checkmarx, actions-cool. 2026 isn’t over. Same pattern every time: pipelines pulling code through mutable refs someone else can move. More and more teams check theirs with Plumber 🪠
Image from Thomas Boni (@thomas_boni)
1
2
1
4
332
aurelien coget retweeted
Thomas Boni (@thomas_boni) profile picture
Thomas Boni
@thomas_boniOct 23
Devs who pinned litellm right now
2
1
5
289
Don’t forget to cook the breakfast too 🍳
Thomas Boni (@thomas_boni) profile pictureThomas Boni
@thomas_boniOct 2
I sat with developers in SF over the last few weeks and watched them run github.com/getplumber/plumbe… Biggest learning: the Plumber Score isn't contextual enough. "Ok, I have an C. But what does that actually mean?" Fair. A letter without context is just another dashboard. I'm cooking 🧑‍🍳
Image from Thomas Boni (@thomas_boni)
1
1
55
aurelien coget retweeted
Thomas Boni (@thomas_boni) profile picture
Thomas Boni
@thomas_boniSep 30
If you have a repo on GitHub, it’s worth this 30 second check
1
5
4,538
I'm excited to attend WeAreDevelopers World Congress 2026! 🚀 Join me on 23-25 September in San Jose! #wearedevs wearedevelopers.com/world-co…
WeAreDevelopers World Congress North America

WeAreDevelopers World Congress North America

WeAreDevelopers World Congress: developers, engineering leaders, and the people building production AI systems.

wearedevelopers.com
3
67
Building something big with @thomas_boni
Image from aurelien coget (@acoget)
1
47
Last picture with my Pixel 6 Pro at wework SF 650 California st
Image from aurelien coget (@acoget)
2
89
aurelien coget retweeted
Plumber (@getplumber_io) profile picture
Plumber@getplumber_ioMar 24
Building a sovereign cloud? You don't "retrofit" security. You build it in. 🏗️ @NumSpotCloud used Plumber to automate SecNumCloud, HDS & ISO 27001 compliance across their CI/CD pipelines. ✅ Policy-as-Code ✅ Audit-ready ✅ Zero drift Read how👇getplumber.io/blog/numspot-u…
Image from Plumber (@getplumber_io)
1
1
1
93
aurelien coget retweeted
Plumber (@getplumber_io) profile picture
Plumber@getplumber_ioMar 16
🚀 Plumber CLI v0.1.66 released 6 releases since v0.1.60 bringing: • Clearer exit codes for CI analysis • New control detecting weakened GitLab security jobs • Config diff to compare effective vs default config • CI security fixes Release notes: github.com/getplumber/plumbe…
Releases · getplumber/plumber

Releases · getplumber/plumber

Plumber detects CI/CD security issues in your GitHub workflows and gives you a score - getplumber/plumber

github.com
2
2
146
aurelien coget retweeted
Plumber (@getplumber_io) profile picture
Plumber@getplumber_ioMar 12
CI/CD pipelines read your code, hold your secrets, and deploy to production. Most orgs have no scalable way to verify they're compliant. We built a 26-point checklist + ISO 27001/NIS2/DORA/CRA mapping to fix that. 👉 getplumber.io/blog/cicd-comp…
CI/CD Compliance Framework for Secure Pipelines | Plumber

CI/CD Compliance Framework for Secure Pipelines | Plumber

Checklist and controls for audit-ready CI/CD compliance (ISO 27001, NIS2, DORA, CRA). Examples, evidence, drift detection, and remediation at scale.

getplumber.io
3
1
4
2,048
aurelien coget retweeted
☁️ DamyR 🐧 (@damyr_fr) profile picture
☁️ DamyR 🐧@damyr_frFeb 26
13 ans sous Debian, et j'ai tout migré vers NixOS ❄️. Config déclarative, rollback en une commande, packages reproductibles… En tant que SRE, difficile de résister ! Découvrez mon parcours ici : damyr.fr/p/nixos-ou-comment-…
NixOS, ou comment j'ai arrêté de bricoler mon Linux

NixOS, ou comment j'ai arrêté de bricoler mon Linux

NixOS : comment j'ai troqué 13 ans de Debian contre un système déclaratif, reproductible et sans mauvaise surprise.

damyr.fr
10
4
44
5,366
aurelien coget retweeted
Plumber (@getplumber_io) profile picture
Plumber@getplumber_ioFeb 27
🆕 Plumber v0.1.47 is out • Override detection for required components & templates (50% compliance reduction if overridden) • Automatic version check (async, skipped in CI) • Config validation on analyze • Selective control execution More info in thread
Image from Plumber (@getplumber_io)
1
1
2
70
aurelien coget retweeted
Plumber (@getplumber_io) profile picture
Plumber@getplumber_ioFeb 20
🆕 Plumber CLI v0.1.43 is out What's new: • GitLab MR comments with compliance summary • Compliance badge for default branch • Config validation with typo detection (no more silent misconfigs) Update your CLI & component 👇 More info in thread
1
1
1
57
aurelien coget retweeted
Plumber (@getplumber_io) profile picture
Plumber@getplumber_ioFeb 16
Your GitLab Pipelines Are Probably Non-Compliant! 🚨 Here’s How to Fix That in 5 Minutes ⏱️🛠️ getplumber.io/blog/hands-on-…
Your GitLab Pipelines Are Probably Non-Compliant. Here's How to Fix That in 5 Minutes. | Plumber

Your GitLab Pipelines Are Probably Non-Compliant. Here's How to Fix That in 5 Minutes. | Plumber

A hands-on walkthrough of using Plumber to scan your GitLab CI/CD pipelines for compliance issues from install to continuous monitoring in under 5 minutes.

getplumber.io
1
1
54
aurelien coget retweeted
Plumber (@getplumber_io) profile picture
Plumber@getplumber_ioFeb 3
🚀 R2Devops is now Plumber. We started with CI/CD standardization. We evolved into CI/CD compliance. 👉 Measurable 👉 Auditable 👉 Scalable Assess posture, enforce requirements, fix non-compliance in minutes. Open-source CLI + platform. 👉 getplumber.io
Plumber - CI/CD security posture management | GitHub & GitLab

Plumber - CI/CD security posture management | GitHub & GitLab

Leaking CI/CD pipelines kill your company. Plumber checks every GitHub and GitLab pipeline before it runs, grades it from A to E, and opens the pull request that fixes what it finds.

getplumber.io
2
3
114
aurelien coget retweeted
Plumber (@getplumber_io) profile picture
Plumber@getplumber_io16 Apr 2025
🚀 R2Devops 2.10 is here! 📦 GitLab Catalog – Track usage & adoption 🔒 MR Compliance – Enforce org-wide policies 📊 Issue Upgrades – Bulk edits, severity, comments 🛠️ One-Click Fixes – Instant compliance resolutions 🔗 docs.r2devops.io/blog/releas…
1
2
106
aurelien coget retweeted
Plumber (@getplumber_io) profile picture
Plumber@getplumber_io12 Mar 2025
🚀 R2Devops 2.9 is here! 🔒 ISO 27001 Compliance – Stay audit-ready 🤖 AI Pipeline Checks – No more missing tasks 👥 Role Quotas – Prevent role sprawl 📊 Better Issue Tracking – Track & filter easily 🔗 docs.r2devops.io/blog/releas…
2
3
4
147
aurelien coget retweeted
Zenika Nantes (@ZenikaNantes) profile picture
Zenika Nantes@ZenikaNantes16 Jan 2025
📺 Retrouvez @Jagostini85 et @acoget dans quelques minutes pour ce live autour de la sécurité de vos pipelines de CI/CD 👉 youtube.com/watch?v=_OGYDJOa…
Image from Zenika Nantes (@ZenikaNantes)
3
3
142
aurelien coget retweeted
Thomas Boni (@thomas_boni) profile picture
Thomas Boni
@thomas_boni6 Jan 2025
Si vous faites de la CI/CD sur GitLab et qu'il y a >30 pipelines dans votre boite votre retour d'expérience m'intéresse beaucoup ! Ca prend 30min et il n'y a rien à préparer : calendly.com/thomasboni/30mi…
1
9
13
857
Load more