defectdojo-mcp

Find secrets with Gitleaks ?

Exemplo de workflow de seguran?a que realiza testes SAST, SCA, DAST, Secrets Scan e IaC Scan via GitHub Actions utilizando ferramentas open source.

DevSecOps, ASPM, Vulnerability Management. All on one platform.

Awesome Trainings from Cloud Native Computing Foundation Projects and Kubernetes related software

A curated list of threat modeling resources (Books, courses - free and paid, videos, tools, tutorials and workshops to practice on ) for learning Threat modeling and initial phases of security review.

Curating the best DevSecOps resources and tooling.

The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.

CMS Scanner: Scan Wordpress, Drupal, Joomla, vBulletin websites for Security issues

Awesome PHP Security Resources ???

Runs Trivy as GitHub action to scan your Docker container image for vulnerabilities