Bringing together SBOMs and advisories.

Utility to read Red Hat VEX files

OWASP Application Security Checklist for testing (mapping ASVS with WSTG)

Security automation content in SCAP, Bash, Ansible, and other formats

Run the Go vendoring process in reverse

Java bytecode static analyzer

Hands on Lab designed around WildFly Swarm as container and using JBoss Forge & KeyCloak

Documents about patterns, vocabulary, concepts, projects hosted, ...

Assessing compliance of a container