🔍🔍 Malware scanner for cloud-native, as part of CI/CD and at Runtime 🔍🔍
sbomqs: The Comprehensive SBOM Quality & Compliance Tool
🔍 Function-level tracing tool for Seccomp profiling, with eBPF
CLI component of OWASP PurpleTeam
Comprehensive set of Terraform coding standards designed for enterprise-level projects
DevSecOps Project using git, GitHub, jenkins, Maven,Junit, SonarQube, Docker, Trivy, Hashicorp Vault, AWS, Kubernetes
Mixeway is security orchestrator for vulnerability scanners which enable easy plug in integration with CICD pipelines. MixewayHub project contain one click docker-compose file which configure and run images from docker hub.
Code examples for the AWS Security Blog post: How to use CI/CD to deploy and configure AWS security services with Terraform
Open source CSPM for Azure - scan for misconfigurations and quantum-unsafe cryptography, map findings to CIS/NIST/ISO27001/SOC2, and fix them with one command
Application Security pipelines
Efficient DevSecOps
Building FlashFathom AI SAAS project that generate Flascards - Deployment Using DevSecOps Best Practices
SBOM Search - Context aware search in SBOM repositories
A curated hub of DevSecOps tools to secure workflows, optimized for CI/CD and more
A Go-based CLI tool to automate the upload and lifecycle management of Software Bill of Materials (SBOM) in OWASP Dependency-Track.
A set of Gitlab pipelines and Github workflows to automate and ease on BugBounty and Penetration Testing engagements
Audit-ready Continuous Delivery for regulated industries.
SBOM Move - Automate build and transfer of SBOMs across systems
To associate your repository with the devsecops-pipeline topic, visit your repo's landing page and select "manage topics."