DevSecOps
147 items from taptuit/awesome-devsecops ★1,746
-
Docker Secrets docs.docker.com
Docker - Store and manage access to secrets within a Docker swarm.
-
Ansible Vault docs.ansible.com
Ansible - Securely store secrets within Ansible pipelines.
-
Deep Dive discotek.ca
Discotek.ca - Static analysis for JVM deployment units including Ear, War, Jar and APK.
-
DevSecCon devseccon.com
Snyk - A community that runs conferences, a blog, a podcast and a Discord dedicated to DevSecOps.
-
Dependency-Track dependencytrack.org
OWASP - Monitor the volume and severity of vulnerable dependencies across multiple projects over time.
-
CyberArk Application Access Manager cyberark.com
CyberArk - Secrets management for applications including secret rotation and auditing.
-
Secure Software Development Framework csrc.nist.gov
NIST - A framework consisting of practices, tasks and implementation examples for a secure development lifecycle.
-
Csper csper.io
Csper - A set of Content Security Policy tools that can test policies, monitor CSP reports and provide metrics and alerts.
-
Google Cloud Key Management Service (KMS) cloud.google.com
Google Cloud Platform - Securely store secrets within GCP.
-
Building Security In Maturity Model (BSIMM) bsimm.com
Synopsys - A framework for software security created by observing and analysing data from leading software security initiatives.
-
BeerSecOps blog.aquasec.com
Aqua Security - Breaking down the silos of Dev, Sec and Ops, discussing topics that span these subject areas.
-
Azure Key Vault azure.microsoft.com
Microsoft Azure - Securely store secrets within Azure.
-
AWS Secrets Manager aws.amazon.com
Amazon AWS - Securely store retrievable application secrets in AWS.
-
AppSec Day appsecday.io
OWASP - An Australian application security conference run by OWASP.
-
Semgrep Academy academy.semgrep.dev
Semgrep - Free, on-demand courses covering topics including API security, secure coding and application security.
-
SafeStack academy.safestack.io
SafeStack - Security training for software development teams, designed to be accessible to individuals and small teams as well as larger organisations.
-
Absolute AppSec absoluteappsec.com
Seth Law & Ken Johnson - Discussions about current events and specific topics related to application security.
