centos 7 security baseline #Ansible

Detect Secrets in GitLab Repositories

All Day DevOps 2017 materials

Demonstrating upload and download of an object to an AWS S3 bucket that is encrypted/decrypted utilizing a customer-provided AES256 key that is securely stored and retrieved from CyberArk Conjur.

A Helm Chart to deploy the Solutions Delivery Platform

Secret generator for .env

Exemplo de uso do dependency check com sonar

Static Application Security Testing (SAST) using Sonarqube workshop

Setup a DevSecOps Infrastructure Pipeline using All Native AWS Tools + CFN_NAG

A Github Action to parse DependencyCheck JSON reports, print the found vulnerabilities and fail the build.

Soteria pipeline with Drone CI and Argo CD

SAProbe is a simple, handy tool that discovers exposed Kubernetes Secrets and ConfigMaps via Service Accounts.

Set up a GKE Cluster in 5 minutes

La intención de la workshop es mostrar y orientar a los equipos de desarrollo, seguridad y devops (entre otros) que quieran comenzar en DevSecOps, a segurar sus aplicaciones o bien a conocer un poco más acerca del desarrollo seguro, para esto, estaremos otorgando algunos tips e información que fuimos aprendiendo para armar un Pipeline DevSecOps …

DongTai is an interactive application security testing(IAST) product that supports the detection of OWASP WEB TOP 10 vulnerabilities, multi-request related vulnerabilities (including logic vulnerabilities, unauthorized access vulnerabilities, etc.), third-party component vulnerabilities, etc.

complete gitlab and gitlab ci with docker

Opsy is a barebones reference to DevSecOps patterns for applications and Linux management.

blackduck findbugs gradle githubactions

chaos engineering kubernetes pipeline

The ContainerSSH packages page