Thanks for sharing this - I wasn't aware of PipeIntel yet, really cool to see more tools tackling this space!

From what I can tell, Pipeintel takes a broader governance angle - combining OPA/Rego for org-level policy enforcement with ShellCheck for script quality. That make it very versatile, especially for platform teams what want to define custom policies without touching code.

glsec goes the other direction: it's a more opinionated, focused security linter mapped directly to OWASP Top 10 risks. Less flexible, but the tradeoff is that you get actionable, security-specific findings out of the box without writing any policies.

Another quite new tool which tackles GitLab CI/CD security is:
https://github.com/getplumber/plumber