gorrion-io / production-readiness-checklist
☆22Updated 2 months ago
Related projects ⓘ
Alternatives and complementary repositories for production-readiness-checklist
- 🖇️ STRIDE vs. ASVS equivalence table☆75Updated 2 months ago
- ☆36Updated 3 years ago
- The Open Threat Modeling Format (OTM) defines a platform independent way to define the threat model of any system.☆169Updated 9 months ago
- AI featured threat modeling and security review action☆40Updated 5 months ago
- The Security Champion Framework provides both a measuring stick and a roadmap generator for Champion Programs.☆104Updated 9 months ago
- 🧪 Correlate Semgrep scans with Python test coverage to prioritize SAST findings and get bug fix suggestions via a self-hosted LLM.☆33Updated last month
- Segment's Threat Modeling training for our engineers☆238Updated 3 years ago
- Too many secrets (2MS) helps people protect their secrets on any file or on systems like CMS, chats and git☆79Updated last week
- ☆80Updated this week
- ☆61Updated last year
- Simple plug-and-play Github Action to block unauthorized outbound traffic (egress) in your Github workflows☆79Updated last week
- Cloud Commotion intends to cause chaos to simulate security incidents☆138Updated 4 months ago
- Tools that checks for misconfigured access to Github OIDC from AWS roles and GCP service accounts☆57Updated last year
- The OWASP DevSecOps Guideline explains how we can implement a secure pipeline and use best practices and introduce tools that we can use …☆61Updated 5 months ago
- Gram is Klarna's own threat model diagramming tool☆280Updated 2 weeks ago
- A full insecure kubernetes application for testing security tools☆54Updated 2 weeks ago
- Adaptive AWS Zero Trust Policy made easy: Auto-generate least-privilege policies based on user activity in real time! Accelerate the adop…☆73Updated 6 months ago
- Nextdoor's Cloud Security Posture Management (CSPM) Evaluation Matrix☆57Updated last year
- Detect publicly accessible Lambda Function URLs in your AWS account☆9Updated 2 years ago
- Semgrep rules corresponding to the OWASP ASVS standard☆27Updated 4 years ago
- A tool to check the security settings of Github Organizations.☆69Updated last year
- This is a companion to the Security Engineer Questions☆200Updated 11 months ago
- https://breaches.cloud☆36Updated 3 weeks ago
- ☆121Updated last year
- An implementation of infrastructure-as-code scanning using dynamic tooling.☆56Updated 2 years ago
- Convert cloudtrail data to MITRE ATT&CK Sightings☆79Updated 2 years ago
- ☆28Updated 7 months ago
- ☆109Updated 3 weeks ago
- ☆30Updated 2 years ago
- EZGHSA is a command-line tool for summarizing and filtering vulnerability alerts on Github repositories.☆35Updated 5 months ago