Alternatives and similar repositories for gha-devsecops:

Users that are interested in gha-devsecops are comparing it to the libraries listed below

• jonrau1 / AWS-DevSecOps-Factory
  Sample DevSecOps pipelines (heavily biased on the "Sec") for various stacks and tools using open-source security tools and AWS native ser…
  ☆67Updated 3 years ago
• krol3 / workshop-cloud-native-security
  workshop about cloud-native security
  ☆71Updated 2 years ago
• tenable / KaiMonkey
  KaiMonkey provides vulnerable infrastructure as code (IaC) to help explore and understand common cloud security threats exposed via IaC.
  ☆98Updated last year
• OWASP / www-project-devsecops-guideline
  The OWASP DevSecOps Guideline explains how we can implement a secure pipeline and use best practices and introduce tools that we can use …
  ☆62Updated 8 months ago
• aws-samples / devsecops-cicd
  ☆89Updated 3 months ago
• hysnsec / awesome-policy-as-code
  A curated list of policy-as-code resources like blogs, videos, and tools to practice on for learning Policy-as-Code.
  ☆186Updated last year
• PaloAltoNetworks / Prisma-Enhanced-Remediation
  Create custom auto-remediation solutions using serverless functions in the cloud.
  ☆53Updated last year
• krol3 / kubernetes-security-checklist
  Awesome resources about Security in Kubernetes
  ☆41Updated 2 years ago
• edgeroute / security-champion-framework
  The Security Champion Framework provides both a measuring stick and a roadmap generator for Champion Programs.
  ☆107Updated last year
• judebantony / cicd-github-action-example
  CICD Using GitHub Action and Harness
  ☆15Updated last year
• OWASP / KubeLight
  OWASP Kubernetes security and compliance tool [WIP]
  ☆105Updated last year
• OWASP / www-project-top-10-ci-cd-security-risks
  OWASP Foundation Web Respository
  ☆81Updated last month
• someengineering / cloud-security-list
  A list of cloud security tools and vendors.
  ☆146Updated 5 months ago
• iacsecurity / tool-compare
  ☆281Updated 2 years ago
• RhinoSecurityLabs / IAMActionHunter
  An AWS IAM policy statement parser and query tool.
  ☆173Updated last year
• ksoclabs / kube-goat
  A deliberately vulnerable Kubernetes cluster
  ☆121Updated last year
• bksarthak / devsecops-book
  Repository for storing code for O'Reilly book
  ☆33Updated last year
• PaloAltoNetworks / prisma-cloud-scan
  GitHub action to scan container images with Palo Alto Networks' Prisma Cloud
  ☆54Updated 3 weeks ago
• aws-samples / aws-waf-firewall-manager-terraform
  ☆63Updated 3 years ago
• trustoncloud / threatmodel-for-aws-s3
  ThreatModel for Amazon S3 - Library of all the attack scenarios on Amazon S3, and how to mitigate them following a risk-based approach
  ☆150Updated last year
• krol3 / devsecops-resources
  A list of resources blogs talks material about DevSecOps
  ☆88Updated 3 years ago
• hysnsec / awesome-sca
  A curated list of Software Component Analysis (SCA) books, courses - free and paid, videos, tools, and tutorials.
  ☆99Updated 2 months ago
• OWASP / www-project-devsecops-maturity-model
  OWASP Foundation Web Respository
  ☆54Updated last year
• aws-samples / devsecops-cicd-containers
  ☆50Updated last year
• dependency-check / Dependency-Check_Action
  Github action to run dependency check
  ☆74Updated 6 months ago
• brianlam38 / AWS-Certified-Security-Specialty
  AWS Certified Security Specialty (2020) course notes
  ☆117Updated 4 years ago
• cider-security-research / top-10-cicd-security-risks
  ☆404Updated 2 years ago
• djschleen / devsecops-architecture-tools
  A collection of diagramming tools to help create DevOps/DevSecOps reference architectures
  ☆66Updated last year
• ayeks / devsecops-reference-architectures
  A collection of DevSecOps reference architectures
  ☆66Updated 4 years ago
• OWASP / Serverless-Goat
  OWASP ServerlessGoat: a serverless application demonstrating common serverless security flaws
  ☆324Updated 6 months ago