DevSecOps
♾️ Collection and Roadmap for everyone who wants DevSecOps. Hope your DevOps are more safe 😎
This page lists names, links and short descriptions. The original list on GitHub is the source and belongs to its authors.
Resources >0. DevSecOps Overview
DevSecOps: Making Security Central To Your DevOps Pipeline
Spacelift - An article explains what DevSecOps aims to achieve, why it’s advantageous, and how the DevSecOps lifecycle looks.
Resources >1. Design
SDL(Secure Development Lifecycle) by Microsoft
Microsoft - A collection of tools and practices that serve as a framework for the secure development lifecycle.
OWASP's Software Assurance Maturity Model
OWASP - A framework to measure and improve the maturity of the secure development lifecycle.
Building Security In Maturity Model (BSIMM)
Synopsys - A framework for software security created by observing and analysing data from leading software security initiatives.
NIST's Secure Software Development Framework
NIST - A framework consisting of practices, tasks and implementation examples for a secure development lifecycle.
Resources >2. Develop
Go-SCP / Go programming language secure coding practices guide
by Checkmarx - Go programming language secure coding practices guide.
Securing Rails Applications
Written by Rails team.
Resources >3. Build
Resources >4. Test
Resources >5. Deploy
CIS Benchmarks
(registration required)
Resources >6. Operate and Monitor
Security of CICD
Related lists in Security
See categoryAwesome-Selfhosted
awesome-selfhosted/awesome-selfhosted
A list of Free Software network services and web applications which can be hosted on your own servers
Awesome Privacy
lissy93/awesome-privacy
🦄 A curated list of privacy & security-focused software and services
Awesome Bug Bounty Tools
vavkamil/awesome-bugbounty-tools
A curated list of various bug bounty tools
android-security-awesome
ashishb/android-security-awesome
A collection of android security related resources
Awesome Hacker Search Engines
edoardottt/awesome-hacker-search-engines
A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
Awesome Web Security
qazbnm456/awesome-web-security
🐶 A curated list of Web Security materials and resources.