tdonaworth Goto Github PK

action-github-workflow-sync

Github Action To Sync Github Action's Workflow Files Across Repositories

actions_sandbox

Just a sandbox to test out GitHub Actions and various settings.

bad-converter-app

A temp conversion sample app with a twist, it will steal your creds1

cdk-github-actions-runner

Deploy self-hosted GitHub Actions runner to AWS Fargate using AWS Cloud Development Kit (CDK)

cloud_security_table_top_exercise

A list of table-top exercises to discuss for cloud security readiness.

cloudthreatmapper

Tool which will map threats to Cloud service, and outline remediations as well as best-practice defaults.

dd-import

A utility to (re-)import findings and language data into DefectDojo

django-defectdojo

DefectDojo is an open-source application vulnerability correlation and security orchestration tool.

dotfiles

:wrench: .files, including ~/.macos — sensible hacker defaults for macOS

gami_intercoderreliabilityreconciliation

GAMI Coder Reliability and Intercoder Reconciliation

gha-digest-pinning-poc

This repo demonstrates how digest pinning isn't an end-all fix, and only one tool. tl;dr - audit your GHAs

gha-digest-pinning-poc-docker-action

Docker Action for GHA Digest Pinning POC use

gists

github_action_vuln

Example repository that contains various GitHub Action vulnerabilities, or things NOT to do.

gitoops

all paths lead to clouds

jwt-security

JWT Security Best Practice notes and examples.

koverally.info

nih-oite-website

NIH/ Intramural Training and Education

opre-ops

pinty

Operate and manipulate physical quantities in Python.. or does it?

pipeline-security

A repository that demonstrates some common pipeline security practices using GitHub Actions

repo-file-sync-action

🔄 GitHub Action to keep files like Action workflows or entire directories in sync between multiple repositories.

s3audit

CLI tool for auditing S3 buckets

security-dashboard

security-stack

A Stack for evaluating container security

terraform-db-param-group-hardening

Terraform module for creating DB Parameter Groups, based off of pre-set json hardening values.

tf-ecr-ecs-gh-deploy

Example repository to build OCI, publish to ECR and deploy to ECS fargate, setup using terraform.

threat-models

Threat model for de-identification process.

weirdaal

WeirdAAL (AWS Attack Library)