Udemy Course on DevSecOps

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Vulnerable app with examples showing how to not use secrets

GitHub Advanced Security scanning tutorial repository for Java

Proactive, Open source API security → API discovery, API Security Posture, Testing in CI/CD, Test Library with 1000+ Tests, Add custom tests, Sensitive data exposure

Java Agent is a Java application probe of DongTai IAST, which collects method invocation data during runtime of Java application by dynamic hooks.

DevSecOps Project using git, GitHub, jenkins, Maven,Junit, SonarQube, Docker, Trivy, Hashicorp Vault, AWS, Kubernetes

Test and monitor your projects for vulnerabilities with Jenkins. This plugin is officially maintained by Snyk.

Fortify on Demand Uploader

Fortify Jenkins plugin

An insecure Java/Spring web application for use in DevSecOps scenarios.

BSides SF 2025: Shifting Left: A Hands-on Introductory Guide to DevSecOps

SonarQube plugin for identifying hardcoded secrets, such as passwords, API keys, AWS credentials, etc..

Maven plugin that integrates with a Dependency Track server to submit dependency manifests and optionally fail execution when vulnerable dependencies are found.

Dongtai-plugin-idea is an IDEA plug-in developed by DongTai team for Java Web application developers. This plug-in provides functions such as vulnerability detection and code audit during application development, enabling developers to find application vulnerabilities more intuitively, quickly and in real time during application development.

CloudRec is an open source multi-cloud security posture management (CSPM) platform designed to help organizations improve the security of their cloud environments.

Easy-to-use Threat modeling-as-a-Code (TaaC) solution following DevSecOps principles. Simple CI/CD integration as well as console usage. Sugar-Free and Secure: no any external dependencies except for chart plotting are used

Conjur plugin for securely providing credentials to Jenkins jobs