Ultimate DevSecOps library
Collect crash (or UndefinedBehaviorSanitizer error) reports, triage, and estimate severity.
Secure SDLC process template
An open-source, detailed blueprint for implementing highly scalable swarms of specialized AI Agents in enterprise product development, emphasizing parallelization, robust governance, compliance, and minimal human oversight
A curated hub of DevSecOps tools to secure workflows, optimized for CI/CD and more
Managing GitHub Advanced Security (GHAS) Controls at Scale
An open requirement framework focused on the secure development and operation of web-based applications and services.
C5-DEC: Common Criteria for Cybersecurity, Cryptography, Clouds – Design, Evaluation and Certification. AI-enabled toolkit for secure system design, development and evaluation via Common Criteria, SSDLC, SpecEngine/DocEngine, CRA, SBOM, threat modelling + risk assessment, and cryptography (incl. post-quantum), CLI/TUI/GUI
Automated security analysis tool generating STRIDE threats and DREAD risk scores from UML diagrams, DFDs, and Infrastructure-as-Code (IaC), built using SSDLC and secure coding practices, addressing OWASP Top 10, and supporting CI/CD-driven DevSecOps workflows.
MethodAtlas is a CLI tool that scans test source trees for test methods and emits one structured record per discovered method — with optional AI-assisted security classification. Java (JUnit 5, JUnit 4, TestNG), C# (.NET — xUnit, NUnit, MSTest), and TypeScript/JavaScript (Jest, Vitest, Mocha) are supported out of the box.
A collection of resources to make it easy to add secure development practices to your project.
Links to my talks, workshop, papers and publications. Start here to learn more!
Add a description, image, and links to the ssdlc topic page so that developers can more easily learn about it.
To associate your repository with the ssdlc topic, visit your repo's landing page and select "manage topics."