🛠 И вот ещё про хардендинг различиных элементов того, с чем инженерам приходится работать https://dev-sec.io/baselines/ жмём на нужный элемент в схеме - получаем ссылку на инструкции.

У них ещё и репозиториев на Github пачка, в которых все примеры опубликованы и аккуратно разложены https://github.com/dev-sec

#devsecops #devops #security

DevOps Trends That Will Play A Key Role in The Future

#DevSecOps #ML #AI #DevOps #Kubernetes

https://upurl.me/ajbc0

DevSecOps Pipeline Demo
#security #devops #devsecops
https://github.com/rcarrata/devsecops-demo

Prowler is an Open Source security tool to perform AWS, Azure, Google Cloud and Kubernetes security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness, and also remediations!
#security #cli #compliance #hardening #devsecops #cloud
https://github.com/prowler-cloud/prowler

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

Syft is a powerful and easy-to-use open-source tool for generating Software Bill of Materials (SBOMs) for container images and filesystems. It provides detailed visibility into the packages and dependencies in your software, helping you manage vulnerabilities, license compliance, and software supply chain security.
#sbom #security #cli #devsecops
https://github.com/anchore/syft