Runs Trivy as GitHub action to scan your Docker container image for vulnerabilities
-
Updated
Aug 19, 2026 - Shell
#
DevSecOps
DevSecOps is the practice of seamlessly integrating security practices into every phase of the software development lifecycle, from initial design through integration, testing, deployment, and delivery. It emphasizes building robust security checks directly into continuous integration and continuous delivery (CI/CD) pipelines, utilizing automated security scanning, and ensuring rigorous dependency management to mitigate vulnerabilities early.
Here are 530 public repositories matching this topic...
AI-powered cybersecurity code review skill for Claude Code. 8 specialist agents, OWASP 2025, CWE Top 25, MITRE ATT&CK, 11 languages, zero configuration.
security-audit owasp cybersecurity code-review appsec devsecops vulnerability-scanner sast claude-code claude-code-skill
-
Updated
Apr 15, 2026 - Shell
BigBang the product
-
Updated
Sep 24, 2026 - Shell
Integrate SonarQube scanner to GitHub Actions
-
Updated
Dec 29, 2024 - Shell
Mixeway is security orchestrator for vulnerability scanners which enable easy plug in integration with CICD pipelines. MixewayHub project contain one click docker-compose file which configure and run images from docker hub.
docker-compose cicd openvas vulnerability-management fortify acunetix security-automation security-tools devsecops vulnerability-scanning checkmarx dependency-track devsecops-pipeline security-orchestrator
-
Updated
Mar 15, 2024 - Shell
🚀 DevSecOps intro elective — 10 hands-on labs + 2 bonus hardening OWASP Juice Shop: threat modeling (STRIDE/Threagile), signed commits & secret scanning, SBOM/SCA, SAST + DAST, IaC security (Checkov/KICS), container & supply-chain hardening (Trivy, Cosign), runtime detection with Falco, and DefectDojo vuln management.
education security course threat-modeling devsecops falco sast dast container-security juice-shop sbom trivy supply-chain-security defectdojo hands-on-labs iac-security cosign
-
Updated
Sep 6, 2026 - Shell
Helps you continuously monitor and fix common security vulnerabilities in your Django application.
-
Updated
Jun 20, 2026 - Shell
Cross-platform developer workstation control plane powered by chezmoi — adaptive terminal themes, AI CLI workflows, read-only MCP, WASM attestations, encrypted secrets, and SLSA-verified releases.
windows macos linux dotfiles tmux terminal ai mcp workstation color-scheme webassembly wsl developer-tools devsecops sops chezmoi mise slsa supply-chain-security ai-cli
-
Updated
Sep 24, 2026 - Shell
A collection of technical and sales resources related to Prisma Cloud Compute and Prisma Cloud Enterprise created for the PANW Channel Partner Ecosystem and other engineers working with the solution
redlock cws devsecops prisma cwp twistlock prisma-cloud aporeto cspm cloudnativesecurity containersecurity cnapp
-
Updated
Dec 19, 2024 - Shell
An ongoing & curated collection of awesome software best practices and techniques, libraries and frameworks, E-books and videos, websites, blog posts, links to github Repositories, technical guidelines and important resources about DevSecOps in Cybersecurity.
devops secops cybersecurity security-vulnerability security-automation security-tools devsecops security-engineering security-development security-compliance security-education cybersecurity-education security-management security-by-design security-lab security-enablement
-
Updated
Jul 25, 2025 - Shell
AI-powered security assessment SKILLS for your codebase. Multi-language (JS, Go, Python, Rust, Java, PHP, Ruby, C#). Works with Claude Code, Codex, OpenCode, etc.
security security-audit static-analysis cybersecurity penetration-testing code-review devsecops claude vulnerability-scanner ai-security claude-code
-
Updated
Feb 23, 2026 - Shell
Use @xonsh wherever you go through the SSH without installation on the host.
devops data-science data-engineering pentesting xonsh security-automation devsecops xontrib xxh xxh-shell
-
Updated
Jul 2, 2026 - Shell
Git Anti-Virus Scan Action - Detect trojans, viruses, malware & other malicious threats.
git security continuous-integration ci anti-virus secops clamav antivirus action hacktoberfest continuous-security devsecops continuous-scanning malware-detection continuous-antivirus repository-antivirus
-
Updated
Sep 18, 2026 - Shell
OWASP EKS Goat is a deliberately vulnerable EKS cluster environment to explore AWS cloud-native security through hands-on attack and defense labs with walkthrough.
hacking owasp cloud-native aws-security cloudsecurity devsecops redteam docker-security eks redteam-infrastructure kubernetes-security containersecurity awssecurity cve-2024-23897 ekssecurity eksgoat eks-goat cve202423897
-
Updated
Jun 22, 2026 - Shell
This repo includes a demo that shows how a Kubernetes cluster can be hijacked and how to prevent it using common best practices.
-
Updated
Feb 22, 2023 - Shell
A hands-on lab toolkit for container security, from CIS-benchmark fundamentals to architectural trust governance. 12 production-grade labs covering image hardening, signing, supply chain attestation, admission control, and runtime debugging. Designed around reproducible, production-oriented container security scenarios.
docker security azure supply-chain devsecops container-security sbom kyverno cosign admission-control hardened-images ai-guided
-
Updated
Aug 1, 2026 - Shell
Collection of roadmaps, tools, best practice, resources about DevSecOps
kubernetes checklist security devops development security-audit continuous-integration continuous-delivery containers software-engineering devsecops sast dast
-
Updated
Sep 6, 2026 - Shell
All that is required to run MobSF in the ci
-
Updated
Aug 11, 2023 - Shell
- Followers
- 207 followers
- Website
- github.com/topics/devsecops
- Wikipedia
- Wikipedia