https://github.com/sovereigncloudstack/security-infra-scan-pipeline
Security scanning pipeline in Zuul focussed on dynamic infra tests
https://github.com/sovereigncloudstack/security-infra-scan-pipeline
security
Last synced: about 1 year ago
JSON representation
Security scanning pipeline in Zuul focussed on dynamic infra tests
- Host: GitHub
- URL: https://github.com/sovereigncloudstack/security-infra-scan-pipeline
- Owner: SovereignCloudStack
- License: apache-2.0
- Created: 2024-02-16T09:09:27.000Z (about 2 years ago)
- Default Branch: main
- Last Pushed: 2024-12-11T11:37:05.000Z (over 1 year ago)
- Last Synced: 2025-01-13T08:12:40.480Z (about 1 year ago)
- Topics: security
- Language: Python
- Homepage: https://scs.community/
- Size: 112 KB
- Stars: 0
- Watchers: 6
- Forks: 0
- Open Issues: 2
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# 🛡️SCS - Security IaaS Scan Pipeline
## Introduction
This repository contains the code necessary to recreate the SCS automated pentesting methodology, which allows to scan infrastructure targets to detect and manage security vulnerabilities, using state-of-the-art tools.
## Features
- Designed for daily and weekly runs
- Based on docker containers
- Port scanning
- Web services identification
- Template based scanning
- Both Fast and Full DAST
- Full infrastructure scanning
- Export of results to a centralized vulnerabilities management system
## Directory Structure
```
- /.zuul.d --> Contains Zuul configuration (jobs definition, global timeouts, secrets, etc)
|- config.yaml
|- secrets.yaml
- /docs -> Contains the security documentation for docs.scs.community
|- overview.md
|- tools.md
- /files --> Contains scripts and other needed files
|- greenbone-compose.yaml
|- gvm_scan.py
|- targets.txt
- playbooks --> Contains the definition of tasks for each job
|- daily-scan.yaml
|- greenbone.yaml
|- httpx.yaml
|- naabu.yaml
|- nucley.yaml
|- owasp-zap.yaml
|- post.yaml
|- pre.yaml
|- weekly-scan.yaml
- .gitignore
- README.md
```
## Getting Started
Go through the [documentation](./docs) for details on how the IaaS Scan Pipeline is designed and specific instructions about prerequisites, configuration and/or tweaks.