ducthinh993 Goto Github PK

acu807155

amazon-eks-use-sbom-to-find-container-image-with-vulnerable-software

This repo hosts Terraform code for generating and analyzing Software Bill of Materials (SBOM) for Amazon ECR images. It helps identify Amazon EKS images with vulnerable software components using Amazon Athena.

amazon-rekognition-id-verification-sample-with-amplify

This sample, built using AWS Amplify, is meant to showcase recommended flows when using Amazon Rekognition for Identity Verification.

assessment-tool

aws-env

Securely populate environment variables using KMS/SSM/Secrets manager on AWS.

aws-google-auth

Provides AWS STS credentials based on Google Apps SAML SSO auth (what a jumble!)

aws-saa-c02-course

Personal notes for SAA-C02 test from: https://learn.cantrill.io

breaking-and-pwning-apps-and-servers-aws-azure-training

Course content, lab setup instructions and documentation of our very popular Breaking and Pwning Apps and Servers on AWS and Azure hands on training!

chainloop

Chainloop is an open source software supply chain control plane, a single source of truth for artifacts plus a declarative attestation crafting process.

cobaltstrike

CobaltStrike's source code

cocert

Split and distribute your private keys securely amongst untrusted network

cosign

Container Signing

csi-red-alert

CSI Red Alert - Scan your Repository and Docker Images on a daily basis. Create & Close the issues in your Gitlab Instance automatically. Notify on Slack with a summary on all new vulnerabilities.

csoa

Continuous Security on AWS Workshop (CSOA) published by Pearson

curriculum

📚Open Source Curriculum for CNCF Certification Courses

cvat

Powerful and efficient Computer Vision Annotation Tool (CVAT)

cve_prioritizer

Streamline vulnerability patching with CVSS, EPSS, and CISA's Known Exploited Vulnerabilities. Prioritize actions based on real-time threat information, gain a competitive advantage, and stay informed about the latest trends.

dagobah

DAGOBAH - open source tool to generate internal threat intelligence, inventory & compliance data from AWS resources.

devsecops

Ultimate DevSecOps library

devsecops-maturitymodel

devsecopsguideline

The OWASP DevSecOps Guideline can help us to embedding security as a part of the development pipeline.

devsecopsguides.github.io

DevSecOpsGuides

driftctl

Detect, track and alert on infrastructure drift

ebook-programming

ecr-scan-lambda

Lambdas which does ECR scan and sends results to slack

eksctl

The official CLI for Amazon EKS

gateway

Supply Chain Security Gateway

gitmonitor

GitMonitor is a Github scanning system to look for leaked sensitive information based on rules

govulncheck-action

This action uses govulncheck to perform a scan of the code, afterwards it will parse the output and transform it into an Sarif Report, which will be uploaded to Github using the code-scanning API.

govwa