DevSecOps Pipeline Demo
#security #devops #devsecops
https://github.com/rcarrata/devsecops-demo

Prowler is an Open Source security tool to perform AWS, Azure, Google Cloud and Kubernetes security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness, and also remediations!
#security #cli #compliance #hardening #devsecops #cloud
https://github.com/prowler-cloud/prowler

Helmper (beta)
Import Helm Charts to OCI registries, optionally with vulnerability patching
#security #containers #devsecops
https://github.com/ChristofferNissen/helmper

Code Scanning/SAST/Static Analysis/Linting using many tools/Scanners + OpenAI GPT with One Report (Code, IaC) - Betterscan Community Edition (CE)
#security #sast #devsecops
https://github.com/topcodersonline-solutions/betterscan-ce

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

Syft is a powerful and easy-to-use open-source tool for generating Software Bill of Materials (SBOMs) for container images and filesystems. It provides detailed visibility into the packages and dependencies in your software, helping you manage vulnerabilities, license compliance, and software supply chain security.
#sbom #security #cli #devsecops
https://github.com/anchore/syft