Open Source Cloud Native Application Protection Platform (CNAPP)

Realtime secret and configuration management tool

LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/

A FREE pragmatic DevOps learning to kickstart your DevOps career and knowledge in the Cloud Native era following the Agile MVP style! ⭐ (2025 plans for DevOps, Cloud, Platform, SRE, SWE)

The Secure Coding Framework

Open Source Cloud Security

The MITRE Security Automation Framework (SAF) Command Line Interface (CLI) brings together applications, techniques, libraries, and tools developed by MITRE and the security community to streamline security automation for systems and DevOps pipelines

Powerpipe: Dashboards for DevOps. Visualize cloud configurations. Assess security posture against a massive library of benchmarks. Build custom dashboards with code.

Building FlashFathom AI SAAS project that generate Flascards - Deployment Using DevSecOps Best Practices

Enhance the security of your web applications effortlessly with AWS Firewall Factory. Safeguard your valuable assets through seamless WAF deployment, updates, and staging, all centrally managed with AWS Firewall Manager.

Kubernetes Common Configuration Scoring System

Model Context Protocol (MCP) Server for the JFrog Platform API, enabling repository management, build tracking, release lifecycle management, and more.

This is a ulimate deployment of wanderlust project using devsecops and gitops methodology

Learn DevSecOps and Cloud Security Engineering fundamentals.

opensecurity: open-source security and compliance. See and secure your cloud, containers, code, networks, deployments, devices. Define your rules, get precise checks, fix gaps fast. Streamlined audits. No fluff.

Automated DevSecOps CICD pipeline for deploying a Netflix clone using Jenkins, Docker, Kubernetes, integrated with email notifications, and monitoring with Grafana and Prometheus.

Examples of AWS CDK/CloudFormation and other goodies related to security 🔐, devops 🔧 and cloud ⛅️ development

This npm package reads the NuGet dependencies of a .NET project, and generates a dependencies tree object.

Secure your code in seconds. VibeSafe is an AI-native DevSecOps CLI tool that detects vulnerabilities, secrets, insecure configs, and hallucinated dependencies before they ship.

Infra is Code & Infra as Code by examples using Cloud Development Kit (CDK) & Terraform