Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀

DevSecOps, ASPM, Vulnerability Management. All on one platform.

OWASP BLT is a collection of security tools.

AI-driven Threat modeling-as-a-Code (TaaC-AI)

DevSecOps Toolchain

Ansible Playbooks for Security Automation with Ansible2 book

A deliberately vulnerable banking application designed for practicing secure code reviews and API security testing. Features common vulnerabilities found in real-world applications, making it an ideal platform for security professionals, developers, and enthusiasts to learn security testing and secure coding practices in a safe environment.

A Trivy plugin that scans and outputs the results (vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more) to an interactive html file.

SPIKE is a lightweight secrets store that uses SPIFFE as its identity control plane. It protects your secrets and helps your ops, SREs, and sysadmins manage sensitive data securely with minimal overhead.

Efficient DevSecOps

Внедрение и эксплуатация PT Application Inspector. Подробнее: https://habr.com/ru/company/pt/blog/557142/

Library to ingest and generate SBOMs

In this workshop we will build a pipeline for a sample WordPress site in a stack. We will explore how to validate, lint and test templates, and dive deeper in tools that help you enforce compliance and network analysis, together with your development pipeline, for a full DevSecOps CI/CD.

.4k4xs4pH1r3

Luminous Onion is a cutting-edge web application designed to revolutionize vulnerability management by seamlessly ingesting security reports from a variety of 3rd party tools. With its intuitive interface and powerful features, Luminous Onion empowers organizations to take charge of their cybersecurity posture like never before.

A capability modelling and visualisation tool for those on the DevSecOps journey

Framework for building an individual CI/CD pipeline geared towards embedded systems

A reference collection of tools for security into DevOps organized in a chemical periodic table style.

A book for modern software engineering companies on software development teams and digital market competitiveness.

The workshop guide sources. The rendered website can be found here : https://devsecops-workshop.github.io/