DevSlop / pixi-crs
CI Pipeline with Pixi, the WAF OWASP Core Rule Set and TestCafe tests.
☆15Updated 3 years ago
Alternatives and similar repositories for pixi-crs:
Users that are interested in pixi-crs are comparing it to the libraries listed below
- AppSecPipeline Specification for DevOps automation.☆40Updated 2 years ago
- Project intended to make Attack Maps part of software development by reducing the time it takes to complete them.☆48Updated 8 years ago
- Orchestron is an Application Vulnerability Management and Correlation Tool.Orchestron helps you solve one key problem "Find and fix vulne…☆31Updated 2 years ago
- ☆20Updated 6 years ago
- ☆14Updated 7 years ago
- Application Security Workflow Automation using Docker and Kubernetes☆22Updated 2 years ago
- Terraform module which provides easy to configure AWS environment for running automated security scanning solutions at scheduled interval…☆46Updated 6 years ago
- OWASP Foundation Web Respository☆27Updated 2 months ago
- badbucket checks your s3 bucket for common misconfigurations☆23Updated 7 years ago
- Core incident handling plugins for aws_ir cli, incident pony, and more.☆21Updated 6 years ago
- Maturity Model Collaborative project☆14Updated 2 years ago
- Python module for evaluation of AWS account best practices around incident handling readieness.☆55Updated 4 years ago
- A tool for testing continuous integration (CI) or continuous delivery (CD) system security☆23Updated 11 years ago
- GitHub action to run Threagile, the agile threat modeling toolkit, on a repo's threagile.yaml file☆13Updated 11 months ago
- Updated incident response generator for training classes☆43Updated 3 years ago
- A platform to create, catalog and deploy tests for tools such as Gauntlt, AttackIQ and Metasploit.☆16Updated 8 years ago
- ☆25Updated 7 years ago
- OWASP Threat Dragon with Gitlab Integration☆25Updated 7 years ago
- Presentations, training modules, and other education materials from Duo Security's Application Security team.☆73Updated 3 years ago
- Overview about existing tools that can be useful for AWS auditing purposes.☆15Updated 7 years ago
- Whitebox evaluation of effective S3 object permissions, to identify publicly accessible files.☆76Updated 3 years ago
- Visualize your Terraform files☆34Updated 4 years ago
- Scans Slack for API tokens, credentials, passwords, and more using YARA rules☆38Updated 4 years ago
- The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters☆63Updated 2 years ago
- Privacy Cards for Software Developers☆52Updated 5 years ago
- Hayat is a script for report and analyze Google Cloud Platform resources.☆80Updated 5 years ago
- Docs: Vulnerability management aggregation of AppSec & OpSec (Tools Listing)☆30Updated last year
- Manage GuardDuty At Enterprise Scale☆22Updated 4 years ago
- ☆63Updated 2 years ago
- A simple file-based scanner to look for potential AWS access and secret keys in files☆91Updated last year