bcdunbar

bcdunbar's Stars

• goldbergyoni/nodebestpractices

  :white_check_mark: The Node.js best practices list (July 2024)

  Language:Dockerfile101k1.9k32310.3k

• aquasecurity/trivy

  Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

  Language:Go24.3k1722.7k2.4k

• analysis-tools-dev/static-analysis

  ⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.

  Language:Rust13.5k3195771.4k

• score-spec/spec

  The Score Specification provides a developer-centric and platform-agnostic Workload specification to improve developer productivity and experience. It eliminates configuration inconsistencies between environments.

  Language:Makefile7.8k234272.2k

• WebGoat/WebGoat

  WebGoat is a deliberately insecure application

  Language:JavaScript7.2k2117065.7k

• aws/aws-sam-cli

  CLI tool to build, test, debug, and deploy Serverless applications using AWS SAM

  Language:Python6.5k1523.1k1.2k

• google/osv-scanner

  Vulnerability scanner written in Go which uses the data provided by https://osv.dev

  Language:Go6.4k58327370

• cloudevents/spec

  CloudEvents Specification

  Language:Python5.2k131481584

• ddd-crew/ddd-starter-modelling-process

  If you're new to DDD and not sure where to start, this process will guide you step-by-step

  5k17122460

• asyncapi/spec

  The AsyncAPI specification allows you to create machine-readable definitions of your asynchronous APIs.

  Language:JavaScript4.4k59450285

• aws/copilot-cli

  The AWS Copilot CLI is a tool for developers to build, release and operate production ready containerized applications on AWS App Runner or Amazon ECS on AWS Fargate.

  Language:Go3.6k512.2k422

• CodingChallengesFYI/SharedSolutions

  Publicly shared solutions to Coding Challenges

  2.7k378581

• skills/secure-code-game

  A GitHub Security Lab initiative, providing an in-repo learning experience, where learners secure intentionally vulnerable code.

  Language:Python2.1k1827228

• evolutionary-architecture/evolutionary-architecture-by-example

  Navigate the complex landscape of .NET software architecture with our step-by-step, story-like guide. Unpack the interplay between modular monoliths, microservices, domain-driven design, and various architectural patterns. Go beyond the one-size-fits-all solutions and understand how to blend these approaches based on your unique needs.

  Language:C#2k3926267

• event-catalog/eventcatalog

  An open source documentation tool to bring discoverability to your event-driven architectures

  Language:TypeScript1.9k23325159

• slsa-framework/slsa

  Supply-chain Levels for Software Artifacts

  Language:Shell1.6k62493229

• bridgecrewio/terragoat

  TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.

  Language:HCL1.2k2432.9k

• boyney123/awesome-eventbridge

  List of resources for learning about events, patterns, and using Amazon EventBridge

  71123233

• actions/dependency-review-action

  A GitHub Action for detecting vulnerable dependencies and invalid licenses in your PRs

  Language:TypeScript62922155110

• MahdiMashrur/Awesome-Application-Security-Checklist

  Checklist of the most important security countermeasures when designing, creating, testing your web/mobile application

  59515067

• github/vscode-codeql-starter

  Starter workspace to use with the CodeQL extension for Visual Studio Code.

  Language:CodeQL5012465253

• adeyosemanputra/pygoat

  intentionally vuln web Application Security in django

  Language:HTML232727837

• event-driven-io/emmett

  Emmett - a Node.js library taking your event-driven applications back to the future!

  Language:TypeScript232103020

• ChristopheBougere/asl-validator

  A simple Amazon States Language validator based on JSON schemas.

  Language:TypeScript10886129

• ghas-bootcamp/ghas-bootcamp

  This bootcamp is designed to familiarize you with GitHub Advanced Security (GHAS) so that you can better understand how to use it in your own repositories.

  Language:Java5641127

• xregistry/spec

  xRegistry related specifications

  Language:Python5341487

• fourTheorem/cross-account-eventbridge

  Sample application for cross-domain, cross-account events with EventBridge

  Language:TypeScript29306

• GeekMasher/ghastoolkit

  GitHub Advanced Security Python Toolkit

  Language:Python132116

• WaleedAshraf/asyncapi-github-action

  GitHub action to validate if AsyncAPI schema file is valid or not.

  Language:JavaScript11386

• aml-org/amf

  AMF (AML Modeling Framework) is an open-source library capable of parsing and validating AML metadata documents.

  Language:Scala513001