Este repo se utiliza como parte de este vídeo: https://youtu.be/mtJ5ysMIN8g

A collection of desktop shortcuts to easily run unikernels.

🥷🏽 Utilize tools available on Kali Linux through Docker and the Tor network for enhanced security and anonymity.

This repo hosts a github action to run parlay( which is used to Enrich SBOMs with data from third party services ) in piplines

Google Cloud Platform Projects, Workshop Training and Skill Badge

A dedicate repo for DevSecOps pre-commit hooks

blackduck findbugs gradle githubactions

Repository for the practical handbook for the DevSecOps-toolkit by the red guild

A comprehensive secure Kubernetes pipeline demonstrating DevOps security best practices

Jenkins Pipeline, Java based application using Kubernetes, Maven, SonarQube, Docker, Trivy.

Sécurisation des workflows Git - Détection de secrets, analyse de code, intégration CI/CD sécurisée

Ansible role to manage running Ecomscan across multiple websites

Reusable GitHub Actions CI for Python/TypeScript with SBOM, CodeQL, Dependabot auto-merge, and PyPI publishing (OIDC Trusted Publisher). Always-green CI ready for DevSecOps.

Repositório para documentação e projetos do estágio de DevSecOps.

DongTai is an interactive application security testing(IAST) product that supports the detection of OWASP WEB TOP 10 vulnerabilities, multi-request related vulnerabilities (including logic vulnerabilities, unauthorized access vulnerabilities, etc.), third-party component vulnerabilities, etc.

This project Uses Nuclei to Detect Vulnerabilities in Early Developement In Kubernetes Infrastructure

sends an alert to telegram, when the CPU and Storage Server reach the threeshold set in

cheatsheet Dev SecOps

A cloud security project focused on securing AWS and Azure environments. Includes IAM hardening, S3 bucket protection, VPC flow logs, and automation scripts.

Gixposed is a powerful command-line tool designed to search the commit history of Git repositories for sensitive information, such as API keys and access tokens. Its purpose is to help developers and security professionals quickly identify and remediate exposed sensitive informations in their codebases.