The Bag of Holding is an application security utility to assist in the organization and prioritization of software security activities.
Check out these talks which cover building your own AppSec pipeline:
- Aaron Weaver - Building An AppSec Pipeline: Keeping Your Program, And Your Life, Sane
- Matt Tesauro - Lessons From DevOps: Taking DevOps Practices Into Your AppSec Life
For information about what's new as well as known issues, see RELEASES.md
For information on setting up a development environment, see INSTALL.md.
The following command will retrieve the latest metrics from ThreadFix for connected applications. We recommend this be run daily as a Cron job.
python manage.py cron --threadfix