Alternatives and similar repositories for gha-devsecops:

Users that are interested in gha-devsecops are comparing it to the libraries listed below

• jonrau1 / AWS-DevSecOps-Factory
  Sample DevSecOps pipelines (heavily biased on the "Sec") for various stacks and tools using open-source security tools and AWS native ser…
  ☆68Updated 3 years ago
• krol3 / devsecops-resources
  A list of resources blogs talks material about DevSecOps
  ☆91Updated 3 years ago
• krol3 / workshop-cloud-native-security
  workshop about cloud-native security
  ☆71Updated 2 years ago
• OWASP / www-project-top-10-ci-cd-security-risks
  OWASP Foundation Web Respository
  ☆82Updated 2 months ago
• OWASP / www-project-devsecops-guideline
  The OWASP DevSecOps Guideline explains how we can implement a secure pipeline and use best practices and introduce tools that we can use …
  ☆66Updated 9 months ago
• tenable / KaiMonkey
  KaiMonkey provides vulnerable infrastructure as code (IaC) to help explore and understand common cloud security threats exposed via IaC.
  ☆98Updated last year
• snyk-labs / snyk-cicd-integration-examples
  Examples of integrating the Snyk CLI into a CI/CD system
  ☆87Updated 3 months ago
• hysnsec / awesome-sca
  A curated list of Software Component Analysis (SCA) books, courses - free and paid, videos, tools, and tutorials.
  ☆103Updated 4 months ago
• OWASP / www-project-devsecops-maturity-model
  OWASP Foundation Web Respository
  ☆55Updated last year
• hysnsec / awesome-policy-as-code
  A curated list of policy-as-code resources like blogs, videos, and tools to practice on for learning Policy-as-Code.
  ☆188Updated last year
• aws-samples / devsecops-cicd
  ☆90Updated 5 months ago
• brianlam38 / AWS-Certified-Security-Specialty
  AWS Certified Security Specialty (2020) course notes
  ☆117Updated 4 years ago
• OWASP / KubeLight
  OWASP Kubernetes security and compliance tool [WIP]
  ☆106Updated last year
• edgeroute / security-champion-framework
  The Security Champion Framework provides both a measuring stick and a roadmap generator for Champion Programs.
  ☆107Updated last year
• c0rdis / security-champions-playbook
  Security Champions Playbook v 2.1
  ☆360Updated last year
• devsecopsmaturitymodel / DevSecOps-MaturityModel
  ☆521Updated last week
• chughes29 / DoD-Federal-Government-Cloud-Computing-Resources
  A collection of DoD and Federal Government Cloud Computing Resources
  ☆48Updated 3 years ago
• djschleen / devsecops-architecture-tools
  A collection of diagramming tools to help create DevOps/DevSecOps reference architectures
  ☆67Updated last year
• PaloAltoNetworks / Prisma-Enhanced-Remediation
  Create custom auto-remediation solutions using serverless functions in the cloud.
  ☆53Updated last year
• snyk-tech-services / snyk-scm-contributors-count
  Count distinct contributor of Snyk watched repos across several SCM
  ☆32Updated 9 months ago
• SeisoLLC / easy_infra
  A docker container to simplify and secure the use of Infrastructure as Code (IaC)
  ☆71Updated this week
• PaloAltoNetworks / prisma-cloud-scan
  GitHub action to scan container images with Palo Alto Networks' Prisma Cloud
  ☆56Updated last week
• iacsecurity / tool-compare
  ☆282Updated 2 years ago
• cider-security-research / top-10-cicd-security-risks
  ☆406Updated 2 years ago
• ayeks / devsecops-reference-architectures
  A collection of DevSecOps reference architectures
  ☆67Updated 4 years ago
• krol3 / kubernetes-security-checklist
  Awesome resources about Security in Kubernetes
  ☆42Updated 2 years ago
• OWASP / www-project-kubernetes-top-ten
  OWASP Foundation Web Respository
  ☆581Updated last year
• trustoncloud / threatmodel-for-aws-s3
  ThreatModel for Amazon S3 - Library of all the attack scenarios on Amazon S3, and how to mitigate them following a risk-based approach
  ☆152Updated last year
• RhinoSecurityLabs / IAMActionHunter
  An AWS IAM policy statement parser and query tool.
  ☆174Updated last year
• ksoclabs / kube-goat
  A deliberately vulnerable Kubernetes cluster
  ☆124Updated last year