andifalk

authorizationserver

Spring Boot OAuth 2.0 & OpenID Connect Identity Provider / Authorization Server

cloud-native-microservices-security

Cloud-Native Microservice Security Bootcamp

microservices-auth-authz-spring-security

Microservices Authentication & Authorization with Spring Security

intro-to-semgrep

keeping-secrets

Tutorials and demos about keeping secrets in software and platforms

kubernetes-ckad

Helpful resources and hints for the Certified Kubernetes Application Developer Certification

security-resources

Collection of security related resources like tools, docs, hints etc.

spring-security-ldap-demo

Demo for authenticating users with Spring Security and LDAP

dotnetcore-webapp

dotnet new webapp

multitenant-jwt-security

Demo for JWT multitenancy

security-testing-demo

Demo for automated security testing

actions-workflow-samples

Help developers to easily get started with GitHub Action workflows to deploy to Azure

angular-bff

ASVS

Application Security Verification Standard (German Translation)

camunda-bpm-junit5

Camunda Community Extension to write process tests with JUnit5

custom-spring-boot-launch-script

Demo for packaging a spring boot executable using a custom embedded launch script

cyclonedx-cli

Preview version of the CycloneDX CLI tool

incident-demo

katacoda-scenarios

Katacoda Scenarios

keycloak-identity-broker

Keycloak as Identity Broker for different providers

rails-boomark-api

Bookmarks service with ruby on rails

siem-demo

Sample applications to demonstrate a SIEM (Security Information and Event Management) and Incident-Management

spring-authorization-server-1

The Spring Authorization Server project is focused on delivering OAuth 2.1 Authorization Server support to the Spring community.

spring-security-for-newbies

Spring Security Introduction Demos

spring4shell-demo

struts-rest-showcase-1

terragoat

TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.

wstg

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

www-project-top-ten

OWASP Foundation Web Respository

yesses

yesses Security Configuration Scanner: Tool to enumerate domains and IPs and test those domains and IPs for basic network and web security properties.