A collection of examples, tips and tricks and snippets of scripting for the Jenkins Pipeline plugin

A GitHub Action for running the ZAP Baseline scan

Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.

Dast tool

Creates CycloneDX Software Bill-of-Materials (SBOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI//CD pipeline with automati…

🔍🔍 Malware scanner for cloud-native, as part of CI/CD and at Runtime 🔍🔍

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

Jenkins plugin to run dynamic agents in a Kubernetes/Docker environment

A very vulnerable web site written in NodeJS with the purpose of have a project with identified vulnerabilities to test the quality of security analyzers tools tools

Kubernetes website and documentation repo:

Development Security Operations