This repository hosts DSP AppSec internal infrastructure deployed in GCP Kubernetes. Check the documentation in this link.
- SDARQ -
SDARQis a coordination platform to guide both developers and appsec professionals through an SDLC and provide interfaces into various tools and bind them. Learn more in this link.
Tools integrated with SDARQ:
- CIS Scanner - Security scanner that assess security posture of GCP projects.
- Automated ZAP Scanner - Scripts running in GKE as Cronjobs to scan a specific list of endpoints.
- DefectDojo
- CodeDx
appsec@broadinstitute.org