DevSecOps, ASPM, Vulnerability Management. All on one platform.

Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀

OWASP BLT is tool with the purpose of making the web a safer place. We have many facets to the project.

Ansible Playbooks for Security Automation with Ansible2 book

DevSecOps Toolchain

AI-driven Threat modeling-as-a-Code (TaaC-AI)

The workshop guide sources. The rendered website can be found here : https://devsecops-workshop.github.io/

In this workshop we will build a pipeline for a sample WordPress site in a stack. We will explore how to validate, lint and test templates, and dive deeper in tools that help you enforce compliance and network analysis, together with your development pipeline, for a full DevSecOps CI/CD.

A capability modelling and visualisation tool for those on the DevSecOps journey

Welcome to our presentation on DevSecOps! In this talk we will uncover the benefits, challenges, and best practices of introducing security into your software development lifecycle (SDLC). DevSecOps from Zero to Hero! - devopsdays Montréal 2024 DevSecOps from Zero to Hero!

A Trivy plugin that scans and outputs the results (vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more) to an interactive html file.

A collection of resources, scripts and configuration files used during the CSN training

Reference Implementation about Azure Open AI. Build and Deploy a Bot to Azure Container Apps and Azure Bot Service based on DevSecOps Practices

Efficient DevSecOps

Внедрение и эксплуатация PT Application Inspector. Подробнее: https://habr.com/ru/company/pt/blog/557142/

The rendered workshop website. The sources can be found here : https://github.com/devsecops-workshop/workshop-guide

ZAP + Docker demo project

DevSecOps best practices with a vulnerable Flask based web application

A reference collection of tools for security into DevOps organized in a chemical periodic table style.

PDF version of Amazon EKS Best Practices Guide for Security in Releases