devsecops topic

List of tools for SecDevOps, vulnerability analysis, network scanning

Myskiv-Ivan

RyzeSCA 是M-SEC社区一款强化 DevSecOps 的软件成分分析工具，能在软件开发过程中分析和管理开源组件的安全风险。

m-sec-org

The SaaS CTO Security Checklist Redux, The DevOps Security Checklist, and The Personal Infosec & Security Checklist

vikrum

开发和安全和运营：DevSecOps-Software development (Dev) and Security (Sec) and IT operations (Ops).

ASTTeam

Powerpipe: Dashboards for DevOps. Visualize cloud configurations. Assess security posture against a massive library of benchmarks. Build custom dashboards with code.

turbot

SBOM Grep - search through SBOMs

interlynk-io

DevSecOps Assessment Framework

Jet-Security-Team

📚A curated list of product security resources.

dagheyman

Automated security decision making under uncertainty

bulwark-security

boostsecurityio/poutine

boostsecurityio