Resources
DevSecOpsGuideline
OWASP/DevSecOpsGuideline
The OWASP DevSecOps Guideline explains how to build a secure CI/CD pipeline, embedding security practices and tools across the SDLC. It is a reference and learning resource for teams adopting shift-left security.
Topics
Related projects
noir1.5kOWASP Noir is a static analysis CLI that extracts endpoints, parameters and shadow APIs from source code and exports them for human auditors, LLM auditors or DAST scanners.
CheatSheetSeries34kThe official OWASP Cheat Sheet Series, a concise collection of high-value application security guidance and best practices organized by topic.- wstg10.3kThe OWASP Web Security Testing Guide, a comprehensive open-source guide and framework for testing web application security.
DevSecOps6.9kThe Ultimate DevSecOps library is a curated awesome-list that organizes open-source security tools and methodologies by topic such as SAST, DAST, supply chain, and Kubernetes.
DevSecOps2.2kDevSecOps is a curated roadmap and resource collection that organizes tools, articles and guidance across the design, develop, build, test, deploy and operate phases.
gitleaks31kA fast CLI scanner that finds passwords, API keys, and tokens leaked in git repos, files, and CI pipelines.