devsecops

awesome-devsecops

An authoritative list of awesome devsecops tools with the help from community experiments and contributions.

bootcamp

A open contribute bootcamp to develop DevSecOps skills...

devsecops

This repository contains information about DevSecOps and how to get involved in this community effort.

defcon-workshop

wardley-maps

A repository for wardley maps related to security topics.

raindance

Project intended to make Attack Maps part of software development by reducing the time it takes to complete them.

git-secrets

Prevents you from committing secrets and credentials into git repositories

assumer

An AWS cross-account tool to support human access with MFA for the CLI and GUI.

radar

Radar provides for early checks and review for software defined templates.

ssl_checks

This repo contains a collection of scripts to help with checks for SSL

firebolt

A platform to create, catalog and deploy tests for tools such as Gauntlt, AttackIQ and Metasploit.

forecast

Forecast is a big data environment for understanding security anomalies as they are presented in a project and is meant to aid in the collection of data for the end-to-end CICD pipeline.

playbook

Coordination is key to success and originates from experiments that begin with manual operations and later get automated to scale. Playbook helps with this process and provides an automation framework to support this maturation process.

x-bootcamp

An extreme bootcamp to enable teams to build DevSecOps into their environment.

controlplane

Your infrastructure is moving and so is your root of trust. This project helps to define a new control plane for locking down access and policies.

science

It's time for some serious insights and for sharing the wealth. Here, we'll share the science behind making security decisions.

selfie

devsecops.github.io

We host the DevSecOps projects site on Github Pages with the interface located here.

lambhack

A very hackable serverless application in AWS Lambda

metasploit-framework

Metasploit Framework

weatherman

Weatherman helps with visualizing security information and metrics for DevOps teams to remediate defects.

heroes

Everyone is a hero in their own way. This repo provides a means of capturing the stories for DevSecOps heroes.

restacker

gauntlt

a ruggedization framework that embodies the principle "be mean to your code"

wm

An automation framework for finding and reporting bugs using chains

assumer-go

atls