jay-johnson / owasp-jenkins
Want to test your applications using the latest OWASP security toolchains and the NIST National Vulnerability Database using Jenkins, Ansible and docker?
☆55Updated 6 years ago
Related projects ⓘ
Alternatives and complementary repositories for owasp-jenkins
- ☆14Updated 7 years ago
- OWASP Threat Dragon with Gitlab Integration☆24Updated 7 years ago
- Proof of Value Terraform Scripts to utilize Amazon Web Services (AWS) Security, Identity & Compliance Services to Support your AWS Accoun…☆15Updated 4 years ago
- The OWASP ZAP Jenkins Plugin extends the functionality of the ZAP security tool into a CI Environment.☆58Updated last month
- A platform to create, catalog and deploy tests for tools such as Gauntlt, AttackIQ and Metasploit.☆16Updated 8 years ago
- Scripts for AWS amusement...☆20Updated 2 years ago
- A Security Results Viewer for the web with storage, teams and history☆35Updated last year
- Sample code snippets for consuming the CloudSploit API☆13Updated 11 months ago
- A development environment built upon docker☆8Updated 4 years ago
- All Day DevOps - Automated Infrastructure Security Monitoring and Defence (ELK + AWS Lambda)☆22Updated 7 years ago
- Repo to hold veracode related issues and code snippets☆9Updated 7 years ago
- Policy Pipeline : place an SDLC around your compliance documentation with a pipeline that renders policy-as-code to human friendly format…☆11Updated 4 years ago
- Offensive Infrastructure with Modern Technologies☆91Updated 3 years ago
- harden system (linux, unix...)☆56Updated this week
- Arachni Web Application Scanner in Docker☆21Updated 2 years ago
- (WIP) A terraform / kitchen-terraform hardening baseline for the cis-aws-foundations-baseline☆24Updated 2 years ago
- docker modsecurity reverse proxy WAF based on nginx☆15Updated 6 years ago
- AppSecPipeline Specification for DevOps automation.☆38Updated last year
- ZAP Management Scripts☆21Updated this week
- DevSec PHP baseline - InSpec Profile☆28Updated 3 months ago
- Search Git Organizations or Repositories for strings☆28Updated 4 years ago
- DevSec Linux Patch Baseline - InSpec Profile☆84Updated 3 months ago
- DevSec MySQL Baseline - InSpec Profile☆61Updated 3 months ago
- Prevents you from committing secrets and credentials into git repositories☆21Updated 7 years ago
- DEPRECATED: A set of utilities for converting and working with compliance data for viewing in the heimdall applications☆35Updated 2 years ago
- setup and configure linux auditd☆20Updated this week
- S3Insights is a platform for efficiently deriving security insights about S3 data through metadata analysis☆11Updated 2 months ago
- Use InSpec to run through the configurations from the OpenStack Security Guide.☆18Updated 3 months ago
- Application Security Workflow Automation using Docker and Kubernetes☆22Updated last year
- Automated security testing framework for web applications☆21Updated last year