sdlc

Some of the questions which i was asked when i was giving interviews for Application/Product Security roles. I am sure this is not an exhaustive list but i felt these questions were important to be asked and some were challenging to answer

xss vulnerability infosec application-security interview-questions appsec webappsec sdlc websecurity devsecops security-engineering websec websecurity-reference security-team security-engineer-interview

UpdatedAug 7, 2020

faros-ai /faros-community-edition

Star439

BI, API and Automation layer for your Engineering Operations data

devops analytics version-control metrics space business-intelligence dbt cicd incident-management hasura dora sdlc business-analytics engops developer-productivity engprod engineering-operations faros tasks-management airbyte

UpdatedFeb 14, 2025
TypeScript

divnix /std

Star428

A DevOps framework for the SDLC with the power of Nix and Flakes. Good for keeping deadlines!

devops nix sdlc nix-flakes

UpdatedFeb 19, 2025
Nix

bmadone /senior-software-engineer

Star396

Collection of articles, books, and recommendations for senior-level interviews and assessments

security patterns solid ci cd architecture interview software-engineering paradigms sdlc codequality

UpdatedAug 7, 2024

mercedes-benz /sechub

Star299

SecHub provides a central API to test software with different security tools.

api client security build rest server continuous-integration orchestration k8s appsec vulnerability-scanners security-scanner secdevops sdlc security-automation security-tools security-testing sast dast sechub

UpdatedMar 17, 2025
Java

Santandersecurityresearch /corsair_scan

Star123

Corsair_scan is a security tool to test Cross-Origin Resource Sharing (CORS).

python security sdlc misconfigurations cors-configurations domain-injection

UpdatedApr 14, 2023
Python

faros-ai /airbyte-connectors

Star115

Airbyte connectors (sources & destinations) + Airbyte CDK for JavaScript/TypeScript

javascript npm typescript etl cicd elt connectors sdlc cdk faros airbyte airbyte-connectors airbyte-sources airbyte-destinations airbyte-cdk

UpdatedMar 18, 2025
TypeScript

smithy-security /smithy

Star102

The security workflow engine!

automation application-security sdlc devsecops cloud-security product-security

UpdatedMar 17, 2025
Go

Night-Master /sdlc_golang

Star101

sdlc 是一个基于 Go 语言构建的安全漏洞示范平台，旨在促进 DevSecOps 和安全开发生命周期 (SDLC) 实践。它通过模拟常见漏洞来增强开发人员的安全意识，除了可以用于devsecops以外，还可以用于安全行业从事者学习漏洞知识或者渗透知识，代码审计，提供了一个实践和学习的环境。本项目采用了前后端分离的设计模式，其中后端利用了轻量级框架 Gin，而前端则使用了 Vue 3。

security sdlc devsecops vulnerability-scanner sast whitebox-test

UpdatedOct 18, 2024
Go

Night-Master /sdlc_python

Star95

sdlc_python 是一个基于python语言构建的devsecops平台，旨在促进 DevSecOps 和安全开发生命周期 (SDLC) 实践。它通过模拟常见漏洞来增强开发人员的安全意识(对应sdlc中对开发人员的安全培训)，并且使用了大模型进行代码安全审计（对应sdlc中代码审计阶段），帮助企业进行安全左移。除了用于 DevSecOps 实践外，sdlc_python 还可以用于学习漏洞知识、渗透测试和代码审计。本项目采用了前后端分离的设计模式，其中后端利用了轻量级框架 Flask，而前端则使用了 Vue 3。

scanner sec sdlc security-tools devsecops code-audit