A curated list of threat modeling resources (Books, courses - free and paid, videos, tools, tutorials and workshops to practice on ) for learning Threat modeling and initial phases of security review.
Runs a scan using Dastardly by Burp Suite against a target site and creates a JUnit XML report for the scan on completion.
Reusable GitHub Actions workflow examples for cloud native DevOps
Docker image to exploit RCE, try for pentest methods and test container security solutions (trivy, falco and etc.)
AI featured threat modeling and security review action
Curation of DevSecOps tools that all work together inside the minimum amount of containers. Just run make exec and read the How To!
Contrast Security Instrumentation for Dockerized Webgoat, with lab instructions.
Code repository for Mastering YAML pipelines Udemy course
It's a Horusec Action proof of concept
GitHub action to run Threagile, the agile threat modeling toolkit, on a repo's threagile.yaml file
Basic simple integration around falco and wazuh into k8s cluster with daemonset deployment.
Deploy Anchore Enterprise in an environment of your choice. Then follow through a series of labs that showcase how you can improve security across your software supply chain.
Dockerized version of security-checker
Dockerized version of PHPCS-Security-Audit
Exercise files associated with the course DevSecOps: Automated Security Testing with James Wickett from LinkedIn Learning.
Add a description, image, and links to the devsecops topic page so that developers can more easily learn about it.
To associate your repository with the devsecops topic, visit your repo's landing page and select "manage topics."