TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.

This GitHub Action runs Checkov against infrastructure-as-code, open source packages, container images, and CI/CD configurations to identify misconfigurations, vulnerabilities, and license compliance issues.

ForgeMT is a secure, scalable GitHub Actions runner platform for ephemeral workloads. Designed for multi-tenant environments, it automates isolated runner provisioning on Kubernetes or EC2, with built-in OIDC, IAM, cost optimization, and deep observability.

Comprehensive set of Terraform coding standards designed for enterprise-level projects

Welcome to the official repository for our class! 📚👩‍💻 Here, you'll find a organized collection of class notes, assignments, and code snippets generated during our sessions.

Code examples for the AWS Security Blog post: How to use CI/CD to deploy and configure AWS security services with Terraform

Build a CI/CD for Microservices and Serverless Functions in AWS ☁️

Example architectures utilizing DevSecOps principles to deploy F5 Application Delivery and Security Platform solutions.

Complete CNAPP Demo using Prisma Cloud

Proof of Value Terraform Scripts to utilize Amazon Web Services (AWS) Security, Identity & Compliance Services to Support your AWS Account Security Posture.

AWS DevSecOps Pipeline with Terraform

Welcome to the "Secure Pipeline" workshop! This hands-on workshop teaches you how to build a comprehensive security-focused CI/CD pipeline with multiple layers of security scanning and best practices.

How to setup a secure Kubernetes cluster on Azure

Example of zero-trust architecture with Caddy Server

A production-grade AWS DevSecOps Hybrid CI/CD Factory that enforces security and compliance at every stage of the software delivery lifecycle. Built with a hybrid IaC approach using Terraform for core platform infrastructure and CloudFormation for CI/CD orchestration.

Infrastructure as Code for SUTs

AWS multi-account, multi-region organization secure base

An end-to-end DevSecOps pipeline to CI/CD Spring Boot web app.

Reusable GitHub Actions workflows for automated security hardening, featuring modular scanners (SAST, container, IaC, malware) with consolidated reports and PR comments.