Merge pull request #2 from aubrel/add-clair-gauntlt-sonarqube

Add Clair, Gauntlt, and SonarQube.
This commit is contained in:
Meitar M 2019-01-01 16:11:24 -05:00 committed by GitHub
commit 884d6a01fd
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -41,10 +41,13 @@ Your contributions and suggestions are heartily♥ welcome. (✿◕‿◕). Plea
See also [awesome-devsecops](https://github.com/devsecops/awesome-devsecops).
- [BlackBox](https://github.com/StackExchange/blackbox) - Safely store secrets in Git/Mercurial/Subversion by encrypting them "at rest" using GnuPG.
- [Clair](https://github.com/coreos/clair) - Statically analyze vulnerabilities in application containers (currently including appc and docker).
- [Gauntlt](https://github.com/gauntlt/gauntlt) - Automate basic pentesting against your applications.
- [Git Secrets](https://github.com/awslabs/git-secrets) - Prevents you from committing passwords and other sensitive information to a git repository.
- [Prowler](https://github.com/toniblyx/prowler) - Tool based on AWS-CLI commands for Amazon Web Services account security assessment and hardening.
- [Vault](https://www.vaultproject.io/) - Tool for securely accessing secrets such as API keys, passwords, or certificates through a unified interface.
- [git-crypt](https://www.agwa.name/projects/git-crypt/) - Transparent file encryption in git; files which you choose to protect are encrypted when committed, and decrypted when checked out.
- [SonarQube](https://github.com/SonarSource/sonarqube) - For "continuous inspection." Works like Continuous Integration, but specifically for vulnerabilities. Sniffs out bugs, security holes, and detects new issues.
## Honeypots