blackduckcopilot

SAST_DAST_examples for Fortify and Webinspect

Scanner for cryptographic gems & their reverse dependecies in Ruby applications

Experimentation and Hands-on to enable SecOPS for a microservices developed with SpringBoot.

OWASP's official repository for WebGoat (ASP.NET version)

Same vulnerable app as swsec-intro, but in a more modern framework.

A script to automate SAST analysis of your decompiled APKs with Checkmarx, and a Dockerfile if you ever need it.

This is SAST IDE plugin for Android developers. Covers common CWEs

Download apk files for static analysis

A compliance automation platform. Scale GRC, and enhance security and compliance program.

open clover sandbox

Docker - Container bauen und pflegen – Best Practices (RevealJS Presentation)

Automating various Git SAST Scanner tools like trufflehog, gitleaks ,etc

Special snowflakes are a main in the posterior - there's times when infra-related changes don't get merged back to earlier branches, causing.. well, different IAC Configurations. Standardize them With helm and conditions - and if you're looking for a way to have Image Promotion figured out (Even for NextsJS - the workaround is a pain because of …

An example JavaScript application that shows how Sonar's deeper SAST can detect vulnerabilities even with third-party libraries

This repository showcases GitHub Actions integrated with CodeQL for automated codebase security analysis.

Reference implementation of CI pipeline steps via Dagger modules 🏗️

ICT Risk Assessment Course

Code scan engine at scale - part of the Chicon project