Pinned Repositories
acu807155
amazon-eks-use-sbom-to-find-container-image-with-vulnerable-software
This repo hosts Terraform code for generating and analyzing Software Bill of Materials (SBOM) for Amazon ECR images. It helps identify Amazon EKS images with vulnerable software components using Amazon Athena.
amazon-rekognition-id-verification-sample-with-amplify
This sample, built using AWS Amplify, is meant to showcase recommended flows when using Amazon Rekognition for Identity Verification.
assessment-tool
aws-env
Securely populate environment variables using KMS/SSM/Secrets manager on AWS.
aws-google-auth
Provides AWS STS credentials based on Google Apps SAML SSO auth (what a jumble!)
AWS-SAA-C02-Course
Personal notes for SAA-C02 test from: https://learn.cantrill.io
breaking-and-pwning-apps-and-servers-aws-azure-training
Course content, lab setup instructions and documentation of our very popular Breaking and Pwning Apps and Servers on AWS and Azure hands on training!
DevSecOpsGuideline
The OWASP DevSecOps Guideline can help us to embedding security as a part of the development pipeline.
helm4sec
List of helm-ready security tool to help your Security team easy deploy applications on Kubernetes.
ducthinh993's Repositories
ducthinh993/amazon-eks-use-sbom-to-find-container-image-with-vulnerable-software
This repo hosts Terraform code for generating and analyzing Software Bill of Materials (SBOM) for Amazon ECR images. It helps identify Amazon EKS images with vulnerable software components using Amazon Athena.
ducthinh993/assessment-tool
ducthinh993/DevSecOpsGuideline
The OWASP DevSecOps Guideline can help us to embedding security as a part of the development pipeline.
ducthinh993/chainloop
Chainloop is an open source software supply chain control plane, a single source of truth for artifacts plus a declarative attestation crafting process.
ducthinh993/CVE_Prioritizer
Streamline vulnerability patching with CVSS, EPSS, and CISA's Known Exploited Vulnerabilities. Prioritize actions based on real-time threat information, gain a competitive advantage, and stay informed about the latest trends.
ducthinh993/devsecopsguides.github.io
DevSecOpsGuides
ducthinh993/ebook-programming
ducthinh993/eksctl
The official CLI for Amazon EKS
ducthinh993/gateway
Supply Chain Security Gateway
ducthinh993/govulncheck-action
This action uses govulncheck to perform a scan of the code, afterwards it will parse the output and transform it into an Sarif Report, which will be uploaded to Github using the code-scanning API.
ducthinh993/govwa
ducthinh993/guac
GUAC aggregates software security metadata into a high fidelity graph database.
ducthinh993/images
Public Chainguard Images
ducthinh993/opencve
CVE Alerting Platform
ducthinh993/osv-to-sarif
ducthinh993/plymouth-themes
A hugh collection (80+) of plymouth themes ported from android bootanimations
ducthinh993/pwndoc
Pentest Report Generator
ducthinh993/pwndoc-ng
Pentest Report Generator
ducthinh993/renovate
Home of the Renovate CLI: Cross-platform Dependency Automation by Mend.io
ducthinh993/robusta
Open source Kubernetes troubleshooting and automation platform
ducthinh993/SecurityControlsFramework
ducthinh993/shamir
🔑 Split and combine secrets using Shamir's Secret Sharing algorithm
ducthinh993/sigrun
Sign your artifacts, source code or container images using Sigstore tools, Save the Signatures you want to use, and Validate & Control the deployments to allow only the known Sources based on Signatures, Maintainers & other payloads automatically.
ducthinh993/snyk-go-parser
A library to parse dependency manifests for Go
ducthinh993/Software-Component-Verification-Standard
Software Component Verification Standard (SCVS)
ducthinh993/terraform-aws-iam
Terraform module which creates IAM resources on AWS 🇺🇦
ducthinh993/validator
:100:Go Struct and Field validation, including Cross Field, Cross Struct, Map, Slice and Array diving
ducthinh993/vex
vexctl is a tool to attest VEX impact statements
ducthinh993/vexctl
A tool to create, transform and attest VEX metadata
ducthinh993/vidgear
A High-performance cross-platform Video Processing Python framework powerpacked with unique trailblazing features :fire: