adaptivui

learn-dev-sec-ops

gh-actions-secure-pipeline-java-demo

Sample Secure Pipeline with GithHub Actions - Ideal for Open Source Projects

DevSecOpsGuideline

The OWASP DevSecOps Guideline can help us to embedding security as a part of the development pipeline.

security-champions-playbook

Security Champions Playbook v 2.1

security-champion-framework

The Security Champion Framework provides both a measuring stick and a roadmap generator for Champion Programs.

Near-X-one

Near X one is a game development project on RPG Maker vx ace,(2D Software) (RPG Maker vx ace is an RPG game creation engine)

dependency-track-maven-plugin

dtrack-audit

OWASP Dependency Track API client for intergration into CI/CD pipeline

serverless_toolkit

A collection of useful Serverless functions I use when pentesting

trape

People tracker on the Internet: OSINT analysis and research tool by Jose Pino

Securinets

Securinets ISI Workshops Materials :D

Vue-Training-1day

Training session for the Vue.js framework

dependency-track

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Alpine

An opinionated scaffolding framework that jumpstarts Java projects with an API-first design, secure defaults, and minimal dependencies

postcss-grid-kiss

A PostCSS plugin to keep CSS grids stupidly simple

tapestry5-xiti

awesome-devsecops

An authoritative list of awesome devsecops tools with the help from community experiments and contributions.

js.org

Dedicated to JavaScript and its awesome community since 2015

subresource-integrity-fallback

Subresource Integrity fallback script

anjlab-tapestry-commons

security-research-pocs

Proof-of-concept codes created as part of security research done by Google Security Team.

DOMPurify

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

shiro-jwt

xdomain

A pure JavaScript CORS alternative

tapestry-sax-parser

Tapestry Core with a SAX template parser (instead of standard StAX)

tapestry-css-combiner

retire.js

scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.

AngularBeans

tapestry-atmosphere

Asynchronous WebSocket/Comet Support in Tapestry

sixpack

Sixpack is a language-agnostic a/b-testing framework