D

devsecops

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

This GitLab CI/CD pipeline implements a complete DevSecOps and GitOps workflow for a containerized application. It performs Dockerfile linting, builds and pushes images with Kaniko, runs Gitleaks and Trivy security scans, generates a CycloneDX SBOM, updates Kubernetes manifests through GitOps, performs DAST using OWASP ZAP and Nuclei, and generates a unified HTML security report with all scan results.

Current version: v1 www.appsecforge.com

This repository manages the deployment and automated security scanning of OWASP Juice Shop

Probably the most modern and sophisticated insecure web application!

Clone of OWASP Juice Shop with GitLab branding and more.

Learn more by seeing our DevSecOps Tutorial

Cheatsheet / IT toolbox

AI-powered security orchestration for GitLab CI/CD. Automated vulnerability patching, threat modeling, and compliance scoring with GPT-4 and Claude AI agents.

This Git repository serves as a valuable resource for managing Dockerfiles and associated scripts.

Setup Static Application Secret Testing (SAST) in GitLab CI pipeline using NJSScan and Semgrep.

This Git repository serves as a valuable resource for managing Automations and associated scripts, like backups script, synchronization, etc.

SPM (Shell Package Manager) is a tool designed to manage shell-based applications and libraries.

Cloud-native DevOps portfolio project with Docker, Kubernetes, GitLab CI/CD, Terraform, AWS and Trivy.

This repository provides a Terraform framework for managing multiple infrastructure projects through a centralized, reusable architecture.

This POC evaluates the HUGO static site generator framework for potential adoption in our infrastructure documentation projects.

This platform is designed to simplify the resignation process by providing a structured and professional way to craft resignation letters.

The purpose of this POC is to perform a comprehensive proof of concept of the entire process, from development to deployment.