sdlc

Some of the questions which i was asked when i was giving interviews for Application/Product Security roles. I am sure this is not an exhaustive list but i felt these questions were important to be asked and some were challenging to answer

xss vulnerability infosec application-security interview-questions appsec webappsec sdlc websecurity devsecops security-engineering websec websecurity-reference security-team security-engineer-interview

UpdatedAug 7, 2020

divnix /std

Star480

A DevOps framework for the SDLC with the power of Nix and Flakes. Good for keeping deadlines!

devops nix sdlc nix-flakes

UpdatedAug 25, 2025
Nix

bmadone /senior-software-engineer

Star403

Collection of articles, books, and recommendations for senior-level interviews and assessments

security patterns solid ci cd architecture interview software-engineering paradigms sdlc codequality

UpdatedAug 7, 2024

mercedes-benz /sechub

Star355

SecHub provides a central API to test software with different security tools.

api client security build rest server continuous-integration orchestration k8s appsec vulnerability-scanners security-scanner secdevops sdlc security-automation security-tools security-testing sast dast sechub

UpdatedJan 12, 2026
Java

24601 /BMAD-AT-CLAUDE

Star192

Breakthrough Method for Agile AI Driven Development ported to Claude Code

agents sdlc claude-code subagents agentic-engineering claude-subagents

UpdatedSep 3, 2025
JavaScript

smithy-security /smithy

Star136

The security workflow engine!

automation application-security sdlc devsecops cloud-security product-security

UpdatedNov 20, 2025
Go

juanandresgs /claude-system

Star131

JAGS' batteries-included Claude Code SDLC config.

multi-agent developer-tools software-engineering sdlc ai-coding claude-code claude-code-hooks claude-code-config

UpdatedFeb 20, 2026
Shell

Santandersecurityresearch /corsair_scan

Star123

Corsair_scan is a security tool to test Cross-Origin Resource Sharing (CORS).

python security sdlc misconfigurations cors-configurations domain-injection

UpdatedApr 14, 2023
Python

Night-Master /sdlc_python

Star113

sdlc_python 是一个基于python语言构建的devsecops平台，旨在促进 DevSecOps 和安全开发生命周期 (SDLC) 实践。它通过模拟常见漏洞来增强开发人员的安全意识(对应sdlc中对开发人员的安全培训)，并且使用了大模型进行代码安全审计（对应sdlc中代码审计阶段），帮助企业进行安全左移。除了用于 DevSecOps 实践外，sdlc_python 还可以用于学习漏洞知识、渗透测试和代码审计。本项目采用了前后端分离的设计模式，其中后端利用了轻量级框架 Flask，而前端则使用了 Vue 3。

scanner sec sdlc security-tools devsecops code-audit

UpdatedFeb 23, 2025
Python

Night-Master /sdlc_golang

Star96

sdlc 是一个基于 Go 语言构建的安全漏洞示范平台，旨在促进 DevSecOps 和安全开发生命周期 (SDLC) 实践。它通过模拟常见漏洞来增强开发人员的安全意识，除了可以用于devsecops以外，还可以用于安全行业从事者学习漏洞知识或者渗透知识，代码审计，提供了一个实践和学习的环境。本项目采用了前后端分离的设计模式，其中后端利用了轻量级框架 Gin，而前端则使用了 Vue 3。

security sdlc devsecops vulnerability-scanner sast whitebox-test

UpdatedOct 18, 2024
Go

apiiro /combobulator

Star95

Dependency Combobulator

security secure-coding sdlc dependency-confusion

UpdatedJan 10, 2024
Python

phcp-tech /docs-toolmaker

Star87

Toolmaker is a lightweight software development life cycle management platform

software-engineering alm sdlc

UpdatedDec 6, 2025

presidio-oss /specif-ai

Star86

Transform your software development lifecycle with Specifai - an intelligent platform that turns project ideas into structured requirements and actionable tasks in minutes.

artificial-intelligence business-intelligence electron-app software-development requirements-management sdlc human-ai presidio functional-requirements non-functional-requirements ai-chat requirements-generator generative-ai business-requirements-document product-requirement-document hai-build business-process-flows

UpdatedNov 26, 2025
TypeScript

jmagly /aiwg

Star80

Cognitive architecture for AI-augmented software development. Specialized agents, structured workflows, and multi-platform deployment. Claude Code · Codex · Copilot · Cursor · Factory · Warp · Windsurf.

orchestration multi-agent developer-tools workflow-automation autonomous-agents sdlc prompt-engineering anthropic claude-code agentic-coding