To support security as code, sensitive credentials and secrets need to be managed, security, maintained and rotated using automation. The projects below provide DevOps teams with …

May 1, 2025 · Checkov is an open-source static code analysis tool designed to help DevSecOps teams identify and remediate misconfigurations and compliance violations in Infrastructure as …

Feb 15, 2024 · Code-Level Insight: Delivers comprehensive source code vulnerability assessments. Open-Source Scrutiny: Specialized scanning for security in open-source …

This repository is a collection of hacker tools, resources, and links for vulnerability analysis. Most tools are UNIX-compliant, free, and open source. Open-source intelligence (OSINT) is …

Nov 25, 2024 · DevSecOps tools integrate security into the DevOps process. They work behind the scenes, from code creation through deployment, to prevent potential threats to code, …

Mar 6, 2025 · The Checkmarx software exposure program takes a deep dive into your source code, identifying and eliminating security vulnerabilities. Its static application security testing …

This article describes 35 DevSecOps tools you can use to harden your security application. The tools are open source and have been arranged in order with regards to their star on GitHub. …

These DevSecOps open source tools provide automation capabilities for CI/CD. Argo CD is an open source, declarative, GitOps continuous delivery tool for Kubernetes. Argo CD pulls …

Apr 17, 2025 · If you're looking to secure your development and operations pipeline, open-source DevSecOps tools are game-changers. They cover everything from vulnerability scanning to …

Jun 7, 2021 · Considering today’s typical application will include 60%-80% open source code, it’s very important that organizations don’t neglect open source security management, and deploy …