Awesome Open Source
Search
Programming Languages
Languages
All Categories
Categories
About
Search results for amazon web services devsecops
amazon-web-services
x
devsecops
x
1 search results found
Prowler
⭐
9,547
Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more
Tfsec
⭐
6,548
Security scanner for your Terraform code
Steampipe
⭐
6,061
Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.
Devsecops
⭐
5,090
Ultimate DevSecOps library
Terrascan
⭐
4,500
Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.
Cloud Devops Learning Resources
⭐
1,153
This repo includes Books and imp notes related to GCP, Azure, AWS, Docker, K8s, and DevOps. More, exam and interview prep notes.
Wrongsecrets
⭐
1,107
Vulnerable app with examples showing how to not use secrets
Terragoat
⭐
1,071
TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.
Electriceye
⭐
794
ElectricEye is a multi-cloud, multi-SaaS Python CLI tool for Asset Management, Security Posture Management & Attack Surface Monitoring supporting 100s of services and evaluations to harden your CSP & SaaS environments with controls mapped to over 20 industry, regulatory, and best practice controls frameworks
Zeuscloud
⭐
628
Open Source Cloud Security
Whispers
⭐
457
Identify hardcoded secrets in static structured text
Aws Security Automation
⭐
442
Collection of scripts and resources for DevSecOps and Automated Incident Response Security
Amazon Ecs Mythicalmysfits Workshop
⭐
327
A tutorial for developers who want to learn about how to containerized applications on top of AWS using AWS Fargate. You will build a sample website that leverages infrastructure as code, containers, CI/CD, and more! If you're planning on running this, let us know @
[email protected]
. At re:Invent 2018, these sessions were run as CON214/CON321/CON322.
Yatas
⭐
299
🦉🔎 A simple tool to audit your AWS/GCP infrastructure for misconfiguration or potential security issues with plugins integration
Tfquery
⭐
277
tfquery: Run SQL queries on your Terraform infrastructure. Query resources and analyze its configuration using a SQL-powered framework.
Hammer
⭐
234
Dow Jones Hammer : Protect the cloud with the power of the cloud(AWS)
Aws Firewall Factory
⭐
205
Easily improve the security of your web applications with aws firewall factory. Protect your valuable assets with seamless WAF deployment, updates, and staging, all efficiently managed centrally with Firewall Manager.
Squealer
⭐
140
Telling tales on you for leaking secrets!
Nuvola
⭐
134
Sonar Secrets
⭐
95
SonarQube plugin for identifying hardcoded secrets, such as passwords, API keys, AWS credentials, etc..
Cfngoat
⭐
64
Cfngoat is Bridgecrew's "Vulnerable by Design" Cloudformation repository. Cfngoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.
Steampipe Postgres Fdw
⭐
57
The Steampipe foreign data wrapper (FDW) is a zero-ETL product that provides Postgres foreign tables which translate queries into API calls to cloud services and APIs. It's bundled with Steampipe and also available as a set of standalone extensions for use in your own Postgres database.
Brainiac
⭐
53
BrainIAC uses static code analysis to analyze IAC code to detect security issues before deployment. This tool can scan for issues like security policy misconfigurations, insecure cloud-based services, and compliance issues.
Introspector
⭐
52
A schema and set of tools for using SQL to query cloud infrastructure.
Devsecops Quickstart
⭐
44
Quickly set up a ready to use development environment integrated with a multi-account CI/CD pipeline following security and DevOps best practices
Steampipe Sqlite
⭐
39
Steampipe SQLite is a zero-ETL engine for SQLite. Virtual tables translate queries into live API calls for cloud services and APIs. Hundreds of plugins with thousands of documented examples.
Cdkgoat
⭐
34
CdkGoat is Bridgecrew's "Vulnerable by Design" AWS CDK repository. CdkGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.
Aws Devsecops Factory
⭐
34
Sample DevSecOps pipelines (heavily biased on the "Sec") for various stacks and tools using open-source security tools and AWS native services
Aws Devsecops Workshop
⭐
33
A continuous security pipeline demo for the AWS DevSecOps Workshop.
Eks Creation Engine
⭐
33
The Amazon Elastic Kubernetes Service (EKS) Creation Engine (ECE) is a Python command-line program created by the Lightspin Office of the CISO to facilitate the creation and enablement of secure EKS Clusters.
Aws Security Services With Terraform
⭐
30
Code examples for the AWS Security Blog post: How to use CI/CD to deploy and configure AWS security services with Terraform
Aws Pipeline
⭐
29
Build a CI/CD for Microservices and Serverless Functions in AWS ☁️
Clinv
⭐
27
DevSecOps command line asset inventory tool
Devsecops
⭐
25
Perimeterator
⭐
24
'Continuous' AWS perimeter monitoring: Periodically scan internet facing AWS resources to detect misconfigured services.
Pythonsecuritypipeline
⭐
24
DevSecOps pipeline for Python based project using Jenkins, Ansible, AWS, and open-source security tools and checks.
Devops Infra Demo
⭐
23
Growing repository of Infrastructure as Code demos (initially created for DevOps Wall Street)
F5 Hybrid Security Architectures
⭐
21
Example hybrid security architectures utilizing DevSecOps principles to deploy F5 Distributed Cloud WAAP in conjunction with the F5 product portfolio.
Learningdevopsukraine
⭐
21
LearningDevOpsUkraine
Sonar Cloudformation Plugin
⭐
20
Sonarqube cloudformation plugin, IaC security supports cfn-nag/checkov
Security Presentations
⭐
18
Collection of my presentations on various topics like application security, python, cloud security, DevSecOps and so on...
Cybercloudlearning
⭐
17
Repo for Cybercloud Tutorials hosted at cybercloud.guru
Devsecops Workshop On Aws
⭐
13
In this workshop we will build a pipeline for a sample WordPress site in a stack. We will explore how to validate, lint and test templates, and dive deeper in tools that help you enforce compliance and network analysis, together with your development pipeline, for a full DevSecOps CI/CD.
Devops Architect Bootcamp
⭐
12
DevOps Boot Camp
Yes3
⭐
9
Whitelist intentionally-public buckets, block everything else
Selfie
⭐
9
Website
⭐
7
Sources for DevSecOps talks podcast website - join the discussion
Aws Modernization Devsecops
⭐
7
AWS Modernization DevSecOps Code Samples
Devsecopspipeline
⭐
6
DevSecOps Container Pipeline Demo
Ssh Restricted
⭐
6
SSH-Restricted deploys an SSH compliance rule (AWS Config) with auto-remediation via AWS Lambda if SSH access is public.
Preventive Security Controls In Pulumi Iac Pipeline
⭐
6
Sample code with security policies in Pulumi CrossGuard to implement preventive security checks in Infrastructure pipelines
Training Essential Aws Devsecops
⭐
6
Course designed to to provide participants with the essential skills in the field of DevSecOps.
Aws Compliancemachinedontstop
⭐
6
Proof of Value Terraform Scripts to utilize Amazon Web Services (AWS) Security, Identity & Compliance Services to Support your AWS Account Security Posture.
Clouddevsecopstemplates
⭐
6
Templates to integrate Fortify application security testing with Amazon Web Services (AWS), Azure, Google Cloud Platform (GCP) and Oracle Cloud Infrastructure (OCI)
Aws Security Week Sf 2018
⭐
5
AWS Security Week SF - DevSecOps Lab by Dome9 - Automating CloudFormation templates validation
Related Searches
Python Amazon Web Services (7,968)
Amazon Web Services Lambda Functions (7,495)
Amazon Web Services Terraform (4,215)
Amazon Web Services Serverless (4,018)
Amazon Web Services Hcl (3,473)
Golang Amazon Web Services (2,930)
Amazon Web Services Aws Lambda (2,670)
Docker Amazon Web Services (2,636)
Amazon Web Services Cloudformation (2,424)
Typescript Amazon Web Services (2,319)
1-1 of 1 search results
Privacy
|
About
|
Terms
|
Follow Us On Twitter
Copyright 2018-2024 Awesome Open Source. All rights reserved.