Awesome Open Source

Programming Languages

Search results for devsecops security automation

security-automation x

39 search results found

Scanners Box ⭐ 8,001

A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑

Faraday ⭐ 4,422

Open Source Vulnerability Management Platform

Django Defectdojo ⭐ 3,433

DevSecOps, ASPM, Vulnerability Management. All on one platform.

Dependency Track ⭐ 2,119

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Bearer ⭐ 1,554

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

Cve Bin Tool ⭐ 997

The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 200 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.

Securecodebox ⭐ 667

secureCodeBox (SCB) - continuous secure delivery out of the box

Scans Software Bill of Materials (SBOMs) for security vulnerabilities

Reconmap ⭐ 368

Vulnerability assessment and penetration testing automation and reporting platform for teams.

Sbt Dependency Check ⭐ 259

SBT Plugin for OWASP DependencyCheck. Monitor your dependencies and report if there are any publicly known vulnerabilities (e.g. CVEs). 🌈

Burp Automator - A Burp Suite Automation Tool. It provides a high level CLI and Python interfaces to Burp Suite scanner and can be used to setup Dynamic Application Security Testing (DAST).

Security Skills Career Roadmap ⭐ 156

Skills and career roadmap for various security roles like appsec, cloud security, devsecops, security engineer, security researchers, pentesting, api security, network security, mobile security and so on.with helpful resources, guidelines

Advanced Security Compliance ⭐ 121

GitHub Advance Security Compliance Action

The MITRE Security Automation Framework (SAF) Command Line Interface (CLI) brings together applications, techniques, libraries, and tools developed by MITRE and the security community to streamline security automation for systems and DevOps pipelines

Mixewayhub ⭐ 92

Mixeway is security orchestrator for vulnerability scanners which enable easy plug in integration with CICD pipelines. MixewayHub project contain one click docker-compose file which configure and run images from docker hub.

Django Security Check ⭐ 78

Helps you continuously monitor and fix common security vulnerabilities in your Django application.

All-in-one tool for managing vulnerability reports from AppSec pipelines

Intercept ⭐ 74

INTERCEPT / Policy as Code Auditing / SAST for Code & APIs

Rapidast ⭐ 49

RapiDAST enables simple, continuous and fully automated application security testing

Security Automation With Ansible 2 ⭐ 42

Ansible Playbooks for Security Automation with Ansible2 book

Prisma Cloud Scan ⭐ 41

GitHub action to scan container images with Palo Alto Networks' Prisma Cloud

Faraday_plugins ⭐ 36

Security tools report parsers for Faradaysec.com

Faraday Cli ⭐ 30

Faraday's Command Line Interface

Cybersecurity Devsecops ⭐ 29

An ongoing & curated collection of awesome software best practices and techniques, libraries and frameworks, E-books and videos, websites, blog posts, links to github Repositories, technical guidelines and important resources about DevSecOps in Cybersecurity.

Secusphere ⭐ 26

Efficient DevSecOps

Fortify Plugin ⭐ 23

Fortify Jenkins plugin

Secobserve ⭐ 22

SecObserve is an open source vulnerability management system for software development teams that supports a variety of open source vulnerability scanners and integrates easily into CI/CD pipelines.

Actions Secrets ⭐ 22

Adding this GitHub Action will scan your repository for sensitive data in your source code. We find things like passwords, server host strings, API keys, .env and config files and more

Actions All In One ⭐ 15

All of our GitHub Actions rolled into one. Or as we like to say: One GitHub Action to rule them all!

Bytesafe Ce ⭐ 13

Bytesafe Community Edition is a security platform that protects organizations from open source software supply chain attacks.

Actions Log4j ⭐ 11

A GitHub Action that scans your public web applications for log4j vulnerabilities after every deployment. Add this to your dev, staging and prod steps and SecureStack will make sure that what you've just deployed is secure and meets your requirements.

Actions Code ⭐ 11

A GitHub Action for using SecureStack to analyse a repository codebase for vulnerabilities in library dependencies (software composition analysis).

Prismacloud Demo ⭐ 10

Complete CNAPP Demo using Prisma Cloud

Secure Go Backend Clean Architecture ⭐ 9

Project that provides DevSecOps best practices on the Go Backend Clean Architecture

IWA (Insecure Web App) Pharmacy Direct - an insecure Spring Java web application for use in Fortify demonstrations

Luminous Onion ⭐ 7

Luminous Onion is a cutting-edge web application designed to revolutionize vulnerability management by seamlessly ingesting security reports from a variety of 3rd party tools. With its intuitive interface and powerful features, Luminous Onion empowers organizations to take charge of their cybersecurity posture like never before.

Helpful workflow templates for GitHub Actions at Bayer (needs to be public for the templates)

Dsp Appsec Infrastructure Apps ⭐ 5

This repository hosts DSP AppSec internal infrastructure apps deployed in GKE.

Mavendependencycheck ⭐ 5

An automation script to run OWASP Dependency-Check on multiple Maven Based projects.

1-39 of 39 search results

Privacy | About | Terms | Follow Us On Twitter

Copyright 2018-2024 Awesome Open Source. All rights reserved.