DevSecOps

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

JavaSecLab is a comprehensive Java vulnerability platform｜​ JavaSecLab是一款综合型Java漏洞平台，提供相关漏洞缺陷代码、修复代码、漏洞场景、审计SINK点、安全编码规范，覆盖多种漏洞场景，友好用户交互UI……

Java Agent is a Java application probe of DongTai IAST, which collects method invocation data during runtime of Java application by dynamic hooks.

DevSecOps Project using git, GitHub, jenkins, Maven,Junit, SonarQube, Docker, Trivy, Hashicorp Vault, AWS, Kubernetes

SonarQube plugin for identifying hardcoded secrets, such as passwords, API keys, AWS credentials, etc..

Udemy Course on DevSecOps

Maven plugin that integrates with a Dependency Track server to submit dependency manifests and optionally fail execution when vulnerable dependencies are found.

Repository containing source code of MixewayFlow service that is Swiss army knife for DevSecOps Teams

Easy-to-use Threat modeling-as-a-Code (TaaC) solution following DevSecOps principles. Simple CI/CD integration as well as console usage. Sugar-Free and Secure: no any external dependencies except for chart plotting are used

Test and monitor your projects for vulnerabilities with Jenkins. This plugin is officially maintained by Snyk.

Dongtai-plugin-idea is an IDEA plug-in developed by DongTai team for Java Web application developers. This plug-in provides functions such as vulnerability detection and code audit during application development, enabling developers to find application vulnerabilities more intuitively, quickly and in real time during application development.

Sonarqube cloudformation plugin, IaC security supports cfn-nag/checkov

Deprecated; please use fcli instead

Fortify Jenkins plugin

An AI-driven tool designed to automate the detection of security vulnerabilities in Java source code.

An insecure Java/Spring web application for use in DevSecOps scenarios.

Mixeway is security orchestrator for vulnerability scanners which enable easy plug in integration with CICD pipelines. MixewayBackend project contains source code of backend with all plugin integrations writer in Spring Boot.

A Java agent that disables platform features you don't use, before an attacker uses them against you.

Nuclei is a fast tool for configurable targeted vulnerability scanning based on templates offering massive extensibility and ease of use.