devsecops

There are 75 repositories under devsecops topic.

aquasecurity / trivy
Scanner for vulnerabilities in container images, file systems, and Git repositories, as well as for configuration issues and hard-coded secrets
security security-tools docker containers vulnerability-scanners vulnerability-detection vulnerability golang go kubernetes hacktoberfest devsecops misconfiguration infrastructure-as-code iac
Language:Go 13258
Mobile-Security-Framework-MobSF
MobSF / Mobile-Security-Framework-MobSF
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
static-analysis dynamic-analysis python mobsf android-security mobile-security windows-mobile-security ios-security mobile-security-framework api-testing web-security malware-analysis runtime-security devsecops apk rest cwe owasp mstg masvs
Language:JavaScript 11850
zricethezav / gitleaks
Protect and discover secrets using Gitleaks 🔑
devsecops git gitleaks go golang secret security security-tools
Language:Go 10446
Scanners-Box
We5ter / Scanners-Box
A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑
pentesting-tools hacker-tools vulnerability-scanners information-security redteam-tools penetration-testing devsecops security-automation smart-contracts privacy-compliance apk-analysis binary-analysis exploitation-framework malware-analysis security-audit code-analyzer static-analysis wifi-hacking wifi-security
6589
prowler
prowler-cloud / prowler
Prowler is an Open Source security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains more than 240 controls covering CIS, PCI-DSS, ISO27001, GDPR, HIPAA, FFIEC, SOC2, AWS FTR, ENS and custom security frameworks.
security security-tools security-audit security-hardening cloudtrail hardening aws-cli aws cis-benchmark assessment aws-auditing compliance gdpr hipaa cis forensics cloud well-architected devsecops hacktoberfest
Language:Shell 6414
tfsec
aquasecurity / tfsec
Security scanner for your Terraform code
terraform security scanner static-analysis ci aws azure google-cloud-platform compliance infrastructure-as-code devsecops vulnerability-scanners misconfiguration digitalocean devops linter go terraform-security
Language:Go 4893
gravitl / netmaker
Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks.
cloud devsecops golang k8s kubernetes mesh mesh-networks netmaker network networking openvpn security virtual-network vpn wg-quick wireguard wireguard-ui zero-configuration zero-trust zero-trust-network
Language:Go 4684
bridgecrewio / checkov
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
terraform static-analysis aws gcp azure aws-security azure-security gcp-security cloudformation scans compliance kubernetes kubernetes-security devsecops policy-as-code infrastructure-as-code devops terraform-security hacktoberfest bicep
Language:Python 4522
infobyte / faraday
Open Source Vulnerability Management Platform
devops penetration-testing vulnerability vulnerability-scanners security security-audit pentesting continuous-scanning infosec vulnerability-management collaboration burpsuite nessus nmap devsecops security-automation orchestration cve appsec cybersecurity
Language:Python 3430
terrascan
tenable / terrascan
Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.
security-tools infrastructure-as-code devsecops devops security terraform aws cloudsecurity cloud-security terrascan infrastructure security-violations architecture kubernetes iac sast azure-security aws-security gcp-security scans
Language:Go 3225
sottlmarek / DevSecOps
Ultimate DevSecOps library
security devops devsecops cloud tool aws k8s docker awesome-list azure gcp kubernetes ssdlc awesome cybersecurity serverless ci-cd automation containers
3207
devsecops / awesome-devsecops
An authoritative list of awesome devsecops tools with the help from community experiments and contributions.
devsecops threat-intelligence devops podcast
3116
kubernetes-goat
madhuakula / kubernetes-goat
Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀
cloud-native cloud-security cloudsecurity container container-security devsecops docker hacking helm infrastructure kubernetes kubernetes-goat kubernetes-security microservices owasp pentesting security vulnerable-app
Language:HTML 2663
bunkerweb
bunkerity / bunkerweb
🛡️ Make your web services secure by default !
nginx clamav modsecurity docker security dnsbl crowdsec reverse-proxy bunkerized-nginx hardening web-security security-tuning cybersecurity devsecops antibot letsencrypt swarm kubernetes devops hosting
Language:Python 2614
firezone
firezone / firezone
WireGuard®-based VPN server and firewall
cloud vpn firewall security wireguard wireguard-vpn wireguard-ui vpn-server network-security self-hosted virtual-network network networking devsecops wg-easy wg-quick
Language:Elixir 2611
DefectDojo / django-DefectDojo
DefectDojo is a DevSecOps and vulnerability management tool.
python vulnerability-databases django security owasp analytics vulnerability-management automation security-automation security-orchestration devsecops vulnerability-correlation kubernetes hacktoberfest appsec
Language:HTML 2295
baidu / openrasp
🔥Open source RASP solution
waf devsecops security iast rasp
Language:C++ 2265
ajinabraham / nodejsscan
nodejsscan is a static security code scanner for Node.js applications.
javascript nodejs static-analysis security security-scanner sast devsecops code-analysis code-review node node-security nodejsscan lint
Language:CSS 2006
archerysec / archerysec
Centralize Vulnerability Assessment and Management for DevSecOps Team
vulnerability-assessment vulnerabilities scanning pentesting vulnerability-management opensource pentesters secdevops devops devops-tools devsecops
Language:Python 1958
dalfox
hahwul / dalfox
🌙🦊 DalFox is an powerful open source XSS scanning tool and parameter analyzer, utility
xss security bugbounty bugbounty-tool golang xss-scanner devsecops cicd-pipeline vulnerability xss-detection xss-bruteforce xss-exploit
Language:Go 1936
ThreatMapper
deepfence / ThreatMapper
🔥 🔥 Open source cloud native security observability platform. Linux, K8s, AWS Fargate and more. 🔥 🔥
cloud-native serverless vulnerability-management threat-analysis devsecops secops registry-scanning vulnerability-scanning security-tools security-vulnerability log4j2 cwpp observability cloudsecurity vulnerability-scanners vulnerability-detection vulnerability-assessment scanning-tool
Language:JavaScript 1835
deepfence / SecretScanner
:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:
scanning-tool secret-keys secrets-management infosectools vulnerability-scanners k8s containers kubernetes secrets docker security-tools security password secrets-detection devsecops
Language:Go 1386
dependency-track
DependencyTrack / dependency-track
Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
owasp appsec security bom vulnerabilities component-analysis nvd software-security software-composition-analysis sca bill-of-materials vulndb package-url purl vulnerability-detection ossindex sbom devsecops security-automation cyclonedx
Language:Java 1268
lunasec-io / lunasec
LunaSec - Open Source AppSec platform that automatically notifies you the next time vulnerabilities like Log4Shell or node-ipc happen. Track your dependencies and builds in a centralized service. Get started in one-click via our GitHub App or host it yourself. https://github.com/apps/lunatrace-by-lunasec/
compliance cve-scanning cybersecurity dependency-analysis devsecops gdpr hardening log4shell pci-dss privacy-by-design sbom sbom-generator scanning scanning-tool security security-tools soc2 tokenization web-security zero-trust
Language:TypeScript 1137
GitGuardian / ggshield
Detect secrets in source code, scan git repos, and use pre commit hooks to prevent API key leaks.
devsecops secret security credentials api apikey key code detection leak scanning precommit shiftleft
Language:Python 1075
krol3 / container-security-checklist
Checklist for container security - devsecops practices
containers devsecops security
960
ahmedtariq01 / Cloud-DevOps-Learning-Resources
This repo includes Books and imp notes related to GCP, Azure, AWS, Docker, K8s, and DevOps. More, exam and interview prep notes.
ansible aws azure devops gcp jenkins books docker kubernetes notes azure-devops terraform devops-tools linux multicloud cloudcomputing cloudsecurity cicd devsecops containers
949
ajinabraham / CMSScan
CMS Scanner: Scan Wordpress, Drupal, Joomla, vBulletin websites for Security issues
wordpress drupal joomla vbulletin security automation devsecops security-dashboard
Language:CSS 872
DevSecOps-Playbook
6mile / DevSecOps-Playbook
This is a step-by-step guide to implementing a DevSecOps program for any size organization
devsecops security playbook
842
cicd-goat
cider-security-research / cicd-goat
A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.
appsec cicd ctf devops devsecops infosec jenkins security
Language:Python 813
guardrailsio / awesome-php-security
Awesome PHP Security Resources 🕶🐘🔐
php security security-tools application-security devsecops awesome-list awesome
804
bridgecrewio / terragoat
TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.
terraform aws-security cloud-security goat azure-security gcp-security devsecops
Language:HCL 780
awesome-threat-modelling
hysnsec / awesome-threat-modelling
A curated list of threat modeling resources (Books, courses - free and paid, videos, tools, tutorials and workshops to practice on ) for learning Threat modeling and initial phases of security review.
threat-modeling practical-devsecops security-review devsecops-university appsec devsecops awesome awesome-list
Language:Dockerfile 726
kube-scan
octarinesec / kube-scan
kube-scan: Octarine k8s cluster risk assessment tool
k8s security-tools security-scanner security-audit security devops devsecops kubernetes cloud-native security-scanners
Language:Go 715
XmirrorSecurity / OpenSCA-cli
OpenSCA is a Software Composition Analysis (SCA) solution that supports detection of open source component dependencies and vulnerabilities.
sca devsecops opensca security
Language:Go 683
awesome-devsecops
TaptuIT / awesome-devsecops
Curating the best DevSecOps resources and tooling.
application-security devops devsecops secure-software-development awesome-list awesome hacktoberfest
645

ezoic increase your site revenue