A curated list of threat modeling resources (Books, courses - free and paid, videos, tools, tutorials and workshops to practice on ) for learning Threat modeling and initial phases of security review.
Runs a scan using Dastardly by Burp Suite against a target site and creates a JUnit XML report for the scan on completion.
Reusable GitHub Actions workflow examples for cloud native DevOps
Docker image to exploit RCE, try for pentest methods and test container security solutions (trivy, falco and etc.)
AI featured threat modeling and security review action
Curation of DevSecOps tools that all work together inside the minimum amount of containers. Just run make exec and read the How To!
Contrast Security Instrumentation for Dockerized Webgoat, with lab instructions.
Code repository for Mastering YAML pipelines Udemy course
GitHub action to run Threagile, the agile threat modeling toolkit, on a repo's threagile.yaml file
It's a Horusec Action proof of concept
Jenkins CI (dynamic K8s agents) → signed, SBOM'd supply chain (Syft + Cosign/Sigstore) → enforced at admission by Kyverno, watched at runtime by Falco, backed up by Velero. Local-first on kind.
Basic simple integration around falco and wazuh into k8s cluster with daemonset deployment.
Deploy Anchore Enterprise in an environment of your choice. Then follow through a series of labs that showcase how you can improve security across your software supply chain.
Dockerized version of security-checker
Add a description, image, and links to the devsecops topic page so that developers can more easily learn about it.
To associate your repository with the devsecops topic, visit your repo's landing page and select "manage topics."