devsecops.md

Links Pages

Threat Analayis

• Microsoft DevOps Threat Matrix

Containers

• Container Security Checklist: From Image to Workload
• Top 20 Dockefile best Practices - Sysdig, March 2021
• Container & Kubernetes Security Tools from container-security.site

CICD

• Top 10 CICD Security Risks
• https://github.com/TupleType/awesome-cicd-attacks

OPA

• https://github.com/StyraInc/awesome-opa

DoD

• https://public.cyber.mil/devsecops/
• https://dl.dod.cyber.mil/wp-content/uploads/devsecops/pdf/DoDEnterpriseDevSecOpsStrategyGuide.pdf
• https://dl.dod.cyber.mil/wp-content/uploads/devsecops/pdf/DoD-Enterprise-DevSecOps-Reference-Design-v2.0-CNCF-Kubernetes.pdf
• https://dodcio.defense.gov/Portals/0/Documents/Library/DoD%20Enterprise%20DevSecOps%20Reference%20Design%20-%20AWS%20Managed%20Services_DoD-CIO_20211019.pdf
• DoD Enterprise DevSecOps Playbook

CNCF

• Secure Software Factory Whitepaper