A curated list of awesome CI CD security resources
β845Sep 29, 2026Updated 2 weeks ago
Alternatives and similar repositories for awesome-cicd-security
Users that are interested in awesome-cicd-security are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- π A curated list of awesome Docker security resourcesβ725Feb 28, 2026Updated 7 months ago
- A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.β2,324Jul 14, 2024Updated 2 years ago
- Threat matrix for CI/CD Pipelineβ771May 31, 2026Updated 4 months ago
- Ultimate DevSecOps libraryβ6,911Aug 12, 2026Updated 2 months ago
- Checklist for container security - devsecops practicesβ1,626Sep 15, 2025Updated last year
- 1-Click AI Models by DigitalOcean Gradient β’ AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- A curated list of awesome Kubernetes security resourcesβ968Dec 15, 2023Updated 2 years ago
- π‘οΈ Awesome Cloud Security Resources βοΈβ2,506Mar 17, 2026Updated 7 months ago
- A curated list for Awesome Kubernetes Security resourcesβ2,011Jul 31, 2026Updated 2 months ago
- The OWASP DevSecOps Guideline can help us to embedding security as a part of the development pipeline.β1,144Updated this week
- A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the communitβ¦β3,861May 1, 2026Updated 5 months ago
- This is a step-by-step guide to implementing a DevSecOps program for any size organizationβ2,059Dec 21, 2024Updated last year
- Granular, Actionable Adversary Emulation for the Cloudβ2,425Updated this week
- A walkthrough of security controls for a serverless architecture via a demo applicationβ11May 11, 2022Updated 4 years ago
- Practical resources for offensive CI/CD security research. Curated the best resources I've seen since 2021.β635Jun 2, 2026Updated 4 months ago
- Virtual machines for every use case on DigitalOcean β’ AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- A curated list of threat modeling resources (Books, courses - free and paid, videos, tools, tutorials and workshops to practice on ) for β¦β1,828Aug 2, 2024Updated 2 years ago
- Kubernetes Security Checklist and Requirements - All in One (authentication, authorization, logging, secrets, configuration, network, worβ¦β488Dec 13, 2021Updated 4 years ago
- List of all the Publicly disclosed vulnerabilities of Public Cloud Provider like Amazon Web Services (AWS), Microsoft Azure, Google Cloudβ¦β377May 4, 2023Updated 3 years ago
- Security Remediation Guidesβ745Nov 24, 2025Updated 10 months ago
- API Security Project aims to present unique attack & defense methods in API Security fieldβ1,445Mar 5, 2024Updated 2 years ago
- βΎοΈ Collection and Roadmap for everyone who wants DevSecOps. Hope your DevOps are more safe πβ2,178Sep 18, 2026Updated 3 weeks ago
- Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on pβ¦β5,913Apr 16, 2026Updated 6 months ago
- Security testing tool for Kubernetes, abusing kubelet credentials on public cloud providers.β165Nov 28, 2025Updated 10 months ago
- A collection of awesome security hardening guides, tools and other resourcesβ6,582Sep 22, 2026Updated 3 weeks ago
- Deploy on Railway without the complexity - Free Credits Offer β’ AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Cloud Security Posture Management (CSPM)β3,779Sep 22, 2026Updated 3 weeks ago
- Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source paβ¦β9,074Updated this week
- Awesome free cloud native security learning labs. Includes CTF, self-hosted workshops, guided vulnerability labs, and research labs.β2,206Oct 1, 2025Updated last year
- API Security Project aims to present unique attack & defense methods in API Security fieldβ289Mar 6, 2022Updated 4 years ago
- A kubectl plugin that explains WHY a permission is granted in Kubernetes RBAC by showing the exact Role/ClusterRole + Binding chain.β17Aug 8, 2026Updated 2 months ago
- An authoritative list of awesome devsecops tools with the help from community experiments and contributions.β5,493May 11, 2024Updated 2 years ago
- β758Aug 26, 2022Updated 4 years ago
- Curated list of links, references, books videos, tutorials (Free or Paid), Exploit, CTFs, Hacking Practices etc. which are related to AWSβ¦β1,612Sep 14, 2026Updated last month
- A curated list of Software Component Analysis (SCA) books, courses - free and paid, videos, tools, and tutorials.β116Nov 26, 2024Updated last year
- Deploy on Railway without the complexity - Free Credits Offer β’ AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- An encyclopedia for offensive and defensive security knowledge in cloud native technologies.β2,788Sep 22, 2026Updated 3 weeks ago
- Curating the best DevSecOps resources and tooling.β1,748Aug 2, 2024Updated 2 years ago
- A repository of breaches of AWS customersβ819Sep 9, 2026Updated last month
- TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates howβ¦β1,306Jul 13, 2025Updated last year
- Prowler is the worldβs most widely used open-source cloud security platform that automates security and compliance across any cloud envirβ¦β15,049Updated this week
- Holds the public Hacking the Cloud CTFs.β66Feb 28, 2024Updated 2 years ago
- β593Updated this week