:) lpsm-dev

SAST Tools

Curated list of security tools

💰 - Commercial Tool

Secrets Detection

Proactive

Analysis

Clarifying the requirements, the organisation desires an application deployment and operating model which has these four key characteristics:

1. Agility:

The development, testing, integration and deployment of new features and improvements to the application (and it's infrastructure) is multiple times to orders faster than the current speed of these processes.

2. Zero Downtime:

A Simple and Comprehensive Vulnerability Scanner for Containers, Suitable for CI.

It is considered to be used in CI. Before pushing to a container registry, you can scan your local container image easily.

Most of my Docker images are Alpine based. Trivy uses better vulnerability data for Alpine compared to Clair.

This can be easily plugged in to you CI/CD pipeline - in the scenario we we allow the pipeline to fail, the objective here is to provide visibility.

Kubernetes tasks

Install tools
- Install and Set Up kubectl
- Install Minikube
Configure Pods and Containers
Assign Extended Resources to a Container

Kubernetes cheatsheet

Kubernetes cheatsheet
Master

	u = User.new(username: 'test_user', email: '[email protected]', name: 'Test User', password: 'password', password_confirmation: 'password')
	# u.assign_personal_namespace
	u.skip_confirmation! # Use only if you want the user to be automatically confirmed. If you do not use this, the user receives a confirmation email.
	u.save!

	{
	"Statement": [
	{
	"Action": [
	"apigateway:*",
	"cloudformation:CancelUpdateStack",
	"cloudformation:ContinueUpdateRollback",
	"cloudformation:CreateChangeSet",
	"cloudformation:CreateStack",
	"cloudformation:CreateUploadBucket",

	#!/bin/bash

	# based on
	# https://rancher.com/docs/rancher/v2.x/en/upgrades/upgrades/single-node-upgrade/

	RANCHER_CONTAINER_NAME=$1
	RANCHER_CONTAINER_TAG=$2
	RANCHER_VERSION=$3
	RANCHER_UPGRADE_VERSION=$4

	#!/usr/bin/env bash

	# Documentation
	# https://docs.gitlab.com/ce/api/projects.html#list-projects


	NAMESPACE="orgname"
	BASE_PATH="gitlab_url"
	PROJECT_SEARCH_PARAM=""
	PROJECT_SELECTION="select(.namespace.name == \"$NAMESPACE\")"

	- powershell: \|
	$params = "$env:SONARQUBE_SCANNER_PARAMS" -replace '"sonar.branch.name":"[\w/,-.]*"\,?'
	Write-Host "##vso[task.setvariable variable=SONARQUBE_SCANNER_PARAMS]$params"