DevSecOpsGuideline
DevSecOpsGuideline copied to clipboard
The OWASP DevSecOps Guideline can help us to embedding security as a part of the development pipeline.
Hey! I see that the SCA is a little bit less developed than other parts of the doc, so I'd be happy to expand on this to include various techniques,...
Gitlab security pipelines Can be found: https://gitlab.com/whitespots-public/pipelines With Security stage integrated into your team's pipelines, on, let's say, every release, Security stage is run and trigger Security pipelines to do...
Hey All, I can provide some content about accessing to pipeline configs, user types and branch protection to secure pipeline config files. Is this topic sound valuable for you? Thnks.
Hi folks, As a DevSecOps practitioner for many sizes of development, there is a critical one for maintaining DevSecOps Pipeline to prevent integrity violation and DRY principle with the pipeline...
In the modern AppSec program, it's necessary to "shift-left" security & governance for dependency from the `Code` to the `Plan` stage. # Conceptual approach ## Plan phrase: ### For OSS...
Hi, can u add the source scheme file of [image](https://github.com/OWASP/DevSecOpsGuideline/blob/master/document/assets/images/Pipeline-view.png) to assests folder. This will allow other users to change the images.
Feel free to add any comments and suggestions.
Would there be a significant interest in moving toward diagram as code for the various schema in this repository? I have used `mermaid` personally with significant success to either document...