Skip to content
83

DevSecOps

♾️ Collection and Roadmap for everyone who wants DevSecOps. Hope your DevOps are more safe 😎

2.2k stars434 forks43 entriesLast push Sep 18, 2026 (11 days ago)License MIT

This page lists names, links and short descriptions. The original list on GitHub is the source and belongs to its authors.

Resources >0. DevSecOps Overview

Zero to DevSecOps (OWASP Meetup)

DevSecOps What Why And How (BlackHat USA-19)

DevSecOps – Security and Test Automation (Mitre)

DevSecOps: Making Security Central To Your DevOps Pipeline

Spacelift - An article explains what DevSecOps aims to achieve, why it’s advantageous, and how the DevSecOps lifecycle looks.

In 3 lists

Strengthen and Scale security using DevSecOps

DSOVS (OWASP DevSecOps Verification Standard)

What is DevSecOps? (Github)

Resources >1. Design

SDL(Secure Development Lifecycle) by Microsoft

Microsoft - A collection of tools and practices that serve as a framework for the secure development lifecycle.

In 2 lists

OWASP's Software Assurance Maturity Model

OWASP - A framework to measure and improve the maturity of the secure development lifecycle.

In 2 lists

Building Security In Maturity Model (BSIMM)

Synopsys - A framework for software security created by observing and analysing data from leading software security initiatives.

In 2 lists

NIST's Secure Software Development Framework

NIST - A framework consisting of practices, tasks and implementation examples for a secure development lifecycle.

In 2 lists

DevSecOps basics: 9 tips for shifting left (Gitlab)

6 Ways to bring security to the speed of DevOps (Gitlab)

What is Threat Modeling / Wikipedia

Threat Modeling by OWASP

In 2 lists

Application Threat Modeling by OWASP

Agile Threat Modeling Toolkit

OWASP Threat Dragon

Resources >2. Develop

Secure coding guide by Apple

Secure Coding Guidelines for Java SE

Go-SCP / Go programming language secure coding practices guide

by Checkmarx - Go programming language secure coding practices guide.

In 4 lists

Android App security best practices by Google

Securing Rails Applications

Written by Rails team.

In 2 lists

Resources >3. Build

Scan Source Code using Static Application Security Testing (SAST) with SonarQube, Part 1

Announcing third-party code scanning tools: static analysis & developer security training

SAST levels defined by OWASP

Resources >4. Test

Dynamic Application Security Testing with ZAP and GitHub Actions

Dynamic Application Security Testing (DAST) in Gitlab

DAST using projectdiscovery Nuclei (github action)

ZAPCon 2021-Democratizing ZAP with test automation and domain specific languages

SAST levels defined by OWASP

Penetration Testing at DevSecOps Speed

Resources >5. Deploy

CIS Benchmarks

(registration required)

In 3 lists

DevSecOps in Kubernetes

Best practices for scanning images (docker)

Resources >6. Operate and Monitor

Runtime Application Self-Protection by rapid7

Jumpstarting your devsecops - Pipeline with IAST and RASP

SAST levels defined by OWASP

Attack Surface Analysis Cheat Sheet by OWASP

Security of CICD

Security hardening for GitHub Actions

Github Actions Security Best Practices

GitHub Actions Security Best Practices [cheat sheet included]

Securing Jenkins

Securing Jenkins CI Systems by SANS

DEPRECATED/chef-jenkins-hardening

See category
94

Awesome-Selfhosted

awesome-selfhosted/awesome-selfhosted

A list of Free Software network services and web applications which can be hosted on your own servers

Fresh★ 323k1312 entriesPushed today
91

Awesome Hacker Search Engines

edoardottt/awesome-hacker-search-engines

A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more

Fresh★ 11k574 entriesPushed today
91

Awesome Privacy

lissy93/awesome-privacy

🦄 A curated list of privacy & security-focused software and services

Fresh★ 9.9k459 entriesPushed today
89

Awesome Bug Bounty Tools

vavkamil/awesome-bugbounty-tools

A curated list of various bug bounty tools

Fresh★ 6.3k400 entriesPushed yesterday
88

android-security-awesome

ashishb/android-security-awesome

A collection of android security related resources

Fresh★ 9.7k233 entriesPushed 2 days ago
87

Awesome Web Security

qazbnm456/awesome-web-security

🐶 A curated list of Web Security materials and resources.

Fresh★ 14k368 entriesPushed 15 days ago