Run your GitHub Actions locally 🚀

Helm Charts for Dependency-Track

Home of the Renovate CLI: Cross-platform Dependency Automation by Mend.io

Pentest Report Generator

K8Studio: A Kubernetes IDE

eBPF-based Security Observability and Runtime Enforcement

📖 100 Go Mistakes and How to Avoid Them

A command-line installer for Windows.

Open source API development ecosystem - https://hoppscotch.io (open-source alternative to Postman, Insomnia)

🥧 HTTPie CLI — modern, user-friendly command-line HTTP client for the API era. JSON support, colors, sessions, downloads, plugins & more.

OpenTofu lets you declaratively manage your cloud infrastructure.

Build all of your apps using what you already know and love ❤️

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

Quickly rewrite git repository history (filter-branch replacement)

Security Knowledge Framework (SKF) Python Flask / Angular project

gamification-engine (gengine) is a framework for developing gamification features for your application

The Security Champion Framework provides both a measuring stick and a roadmap generator for Champion Programs.

AppSec Ezine Public Repository.

Security Champions Playbook v 2.1

Golang Secure Coding Practices guide

Implementation of the Cedar Policy Language

DNS over HTTPS targeted malware (only runs once)

The WebAssembly Binary Toolkit

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library

Open Source Identity and Access Management For Modern Applications and Services

Cloud Native Policy Management

🛡️ Awesome Cloud Security Resources ⚔️

AWS Lambda Power Tuning is an open-source tool that can help you visualize and fine-tune the memory/power configuration of Lambda functions. It runs in your own AWS account - powered by AWS Step Fu…

The OWASP DevSecOps Guideline can help us to embedding security as a part of the development pipeline.

The Cloud Native Control Plane