An end-to-end DevSecOps pipeline to CI/CD Spring Boot web app.

SecuSphere Jenkins Plugin

Zenika Lille - Mathis - end-of-study internship 2023

The cep-backend project is a comprehensive solution for managing zip codes using cutting-edge technologies and modern development practices. Built primarily with Node.js and JavaScript, this project leverages various tools and platforms such as Docker, npm, MongoDB, Google Cloud Platform (GCP), SonarQube, Snyk, DevSecOps and Terraform.

chaostoolkit githubactions chaos engineering

Tips & Tricks on Binary Exploitation & Reverse Engineering

Projects, notes and tutorials built to enhance knowledge on DevSecOps, with diagrams on cloud architecture

cheatsheet Dev SecOps

Self-hosted, Node.js based analytics tool for those who care about privacy.

Reference Implementation about Azure App Configuration. Build and Deploy Web App with feature flags support on Azure Kubernetes Services based on DevSecOps Practices

Verify your app was signed correctly. The service also verifies that the app wasn’t tampered with in any way that may prevent it from running on any mobile device

Tolani's Virtual Portfolio

Jenkins Pipeline, Java based application using Kubernetes, Maven, SonarQube, Docker, Trivy.

Some thoughts on Microservices

Sken.ai offers a DevOps-first Continuous Application Security Scanning. With Sken, your apps on Jenkins will be automatically scanned for security vulnerabilities. Sken is one tool to do all types of scans - SAST, DAST, SCA, Secrets and more, without the need for any AppSec expertise.

Reference Implementation about Azure Red Hat OpenShift. Build and Deploy Microservices to ARO based on DevSecOps Practices

It contains snippets, exercises, and solutions for the Udacity AWS Cloud Architect Nanodegree.

Reference Implementation about Cloud-Native. Build and Deploy Microservices to Google Kubernetes Engine based on DevSecOps Practices

This repository contains a DevSecOps pipeline for a simple web application. The pipeline uses Jenkins and Harbor to build, scan, and deploy the application to an EKS cluster. The pipeline also utilizes webhooks when a new commit is pushed to the repository or when a security vulnerability is detected.

IaC/cloud scanners/DevSecOps tools playground