DevSecOps
♾️ Collection and Roadmap for everyone who wants DevSecOps. Hope your DevOps are more safe 😎
https://github.com/hahwul/DevSecOps
Last synced: 14 days ago
JSON representation
CICDのセキュリティ
6. 運用と監視
🚀 その他のロードマップ
素晴らしいリソース
- 
🙏🏼 まとめ
素晴らしいリソース
📦 リソース
0. DevSecOps概要
- Wikipedia - and-security-integration)のDevSecOps
- Zero to DevSecOps (OWASP Meetup)
- DevSecOps What Why And How (BlackHat USA-19)
- DevSecOps – Security and Test Automation (Mitre)
- DevSecOps: Making Security Central To Your DevOps Pipeline
- DSOVS (OWASP DevSecOps Verification Standard)
- Strengthen and Scale security using DevSecOps
- What is DevSecOps? (Github)
1. 設計
- NIST's Secure Software Development Framework
- What is Threat Modeling / Wikipedia
- Threat Modeling by OWASP
- Application Threat Modeling by OWASP
- OWASP's Software Assurance Maturity Model
- SDL(Secure Development Lifecycle) by Microsoft
- DevSecOps basics: 9 tips for shifting left (Gitlab)
- 6 Ways to bring security to the speed of DevOps (Gitlab)
- Agile Threat Modeling Toolkit
- OWASP Threat Dragon
2. 開発
- Secure coding guide by Apple
- Secure Coding Guidelines for Java SE
- Securing Rails Applications
- Go-SCP / Go programming language secure coding practices guide
- Android App security best practices by Google
3. ビルド
- Scan Source Code using Static Application Security Testing (SAST) with SonarQube, Part 1
- SAST levels defined by OWASP
4. テスト
- Dynamic Application Security Testing with ZAP and GitHub Actions
- DAST levels defined by OWASP
- Penetration Testing at DevSecOps Speed
- DAST using projectdiscovery Nuclei (github action)
- ZAPCon 2021-Democratizing ZAP with test automation and domain specific languages