actions

A set of GitHub actions for checking your projects for vulnerabilities

api-demo

ast-github-action

Checkmarx application security testing (AST) GitHub action

attack-navigator

Web app that provides basic navigation and annotation of ATT&CK matrices

awesome-kubernetes-security

A curated list of awesome Kubernetes security resources

aws-eks-best-practices

A best practices guide for day 2 operations, including operational excellence, security, reliability, performance efficiency, and cost optimization.

aws-terraform-best-practices

cdk

📦 Make security testing of K8s, Docker, and Containerd easier.

certified-kubernetes-security-specialist

Curated resources help you prepare for the CNCF/Linux Foundation CKS 2021 "Kubernetes Certified Security Specialist" Certification exam. Please provide feedback or requests by raising issues, or making a pull request. All feedback for improvements are welcome. thank you.

chainalert-github-action

scans popular packages and alerts in cases there is suspicion of an account takeover

checkmarx-cxflow-github-action

Checkmarx CxFlow GitHub Action with SARIF output

checkmarx-github-action

Checkmarx Scan Github Action

code-challenges

codeql-action

Actions for running CodeQL analysis

dep-scan

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

devsecops-book

Repository for storing code for O'Reilly book

docker-security

Getting a handle on container security

georgegxx

georgegxx.github.io

guia-entrevistas-de-programacion

kube-bench

Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark

kubeclarity

KubeClarity is a tool for detection and management of Software Bill Of Materials (SBOM) and vulnerabilities of container images and filesystems

kubelight

OWASP Kubernetes security and compliance tool [WIP]

kubernetes

kubernetes-goat

Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀

kubernetes-security-checklist

Awesome resources about Security in Kubernetes

kubestriker

A Blazing fast Security Auditing tool for Kubernetes

metarget

Metarget is a framework providing automatic constructions of vulnerable infrastructures.

oracledb-xe-11g

owasp-top-10-for-docker-containers-and-kubernetes-security

OWASP Top 10 for Docker Containers and Kubernetes Security, by EC-Council