TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.

This GitHub Action runs Checkov against infrastructure-as-code, open source packages, container images, and CI/CD configurations to identify misconfigurations, vulnerabilities, and license compliance issues.

ForgeMT is a secure, scalable GitHub Actions runner platform for ephemeral workloads. Designed for multi-tenant environments, it automates isolated runner provisioning on Kubernetes or EC2, with built-in OIDC, IAM, cost optimization, and deep observability.

Comprehensive set of Terraform coding standards designed for enterprise-level projects

Welcome to the official repository for our class! 📚👩‍💻 Here, you'll find a organized collection of class notes, assignments, and code snippets generated during our sessions.

Code examples for the AWS Security Blog post: How to use CI/CD to deploy and configure AWS security services with Terraform

Build a CI/CD for Microservices and Serverless Functions in AWS ☁️

Example architectures utilizing DevSecOps principles to deploy F5 Application Delivery and Security Platform solutions.

Complete CNAPP Demo using Prisma Cloud

Proof of Value Terraform Scripts to utilize Amazon Web Services (AWS) Security, Identity & Compliance Services to Support your AWS Account Security Posture.

How to setup a secure Kubernetes cluster on Azure

AWS DevSecOps Pipeline with Terraform

Infrastructure as Code for SUTs

Example of zero-trust architecture with Caddy Server

AWS multi-account, multi-region organization secure base

Demonstration of Check Point Shift Left and WAAP Products. Deployed using DevOps methodology

An end-to-end DevSecOps pipeline to CI/CD Spring Boot web app.

Reference Implementation about IaC to deploy Azure Services, based on DevSecOps Practices

A collection of DevSecOps recipes.