krol3 / devsecops-resources
A list of resources blogs talks material about DevSecOps
☆81Updated 2 years ago
Related projects: ⓘ
- DevSecOps Pipeline using SAST + DAST and SCA tools☆57Updated 11 months ago
- The OWASP DevSecOps Guideline explains how we can implement a secure pipeline and use best practices and introduce tools that we can use …☆58Updated 3 months ago
- DevSecOps pipeline for Python based project using Jenkins, Ansible, AWS, and open-source security tools and checks.☆90Updated 2 years ago
- Repository for storing code for O'Reilly book☆30Updated 7 months ago
- DevSecOpsGuides☆162Updated 2 months ago
- KaiMonkey provides vulnerable infrastructure as code (IaC) to help explore and understand common cloud security threats exposed via IaC.☆93Updated 9 months ago
- List of all the Publicly disclosed vulnerabilities of Public Cloud Provider like Amazon Web Services (AWS), Microsoft Azure, Google Cloud…☆357Updated last year
- Udemy Course on DevSecOps☆78Updated last month
- APIsec|SCAN - Free API security testing using Github actions☆91Updated 4 months ago
- GCPGoat : A Damn Vulnerable GCP Infrastructure☆350Updated this week
- Awesome curate list of cyber security penetration testing tools for Cloud Security mainly AWS/Azure/Google☆115Updated 3 years ago
- ☆83Updated last week
- ☆49Updated this week
- ☆0Updated last week
- Security Remediation Guides☆698Updated last month
- Security interview questions with possible explanation for roles in AppSec, Pentesting, Cloud Security, DevSecOps, Network Security and s…☆286Updated this week
- ☆154Updated 2 months ago
- ☆394Updated last year
- ☆478Updated this week
- OWASP Foundation Web Respository☆560Updated 7 months ago
- The Security Champion Framework provides both a measuring stick and a roadmap generator for Champion Programs.☆102Updated 8 months ago
- OWASP Foundation Web Respository☆79Updated 2 weeks ago
- This Repo serves as a collection of shared security and penetration testing resources for the cloud.☆215Updated 2 months ago
- Best practice example for secure and compliant Google Cloud Platform infrastructure☆99Updated last year
- Kubernetes Security Checklist and Requirements - All in One (authentication, authorization, logging, secrets, configuration, network, wor…☆463Updated 2 years ago
- A list of cloud security tools and vendors.☆124Updated 2 weeks ago
- CNAPPgoat is an open source project designed to modularly provision vulnerable-by-design components in cloud environments.☆264Updated 2 weeks ago
- workshop about cloud-native security☆74Updated 2 years ago
- The OWASP DevSecOps Guideline can help us to embedding security as a part of the development pipeline.☆828Updated 2 months ago
- This is a companion to the Security Engineer Questions☆196Updated 9 months ago