Table of Contents

• Roadmap
• Tools
• Resources
• Security of CICD
• Awesome Resources
• Other Roadmaps
• Wrap Up
• Contributors
• Contribute

Roadmap

Tools

Spending a lot of time on applying DevSecOps is searching, comparing, and making decisions about tools. These tool lists are a good way to help you reduce unnecessary time and apply them quickly 😎

Open Tool List

Resources

0. DevSecOps Overview

• DevSecOps in Wikipedia
• Zero to DevSecOps (OWASP Meetup)
• DevSecOps What Why And How (BlackHat USA-19)
• DevSecOps – Security and Test Automation (Mitre)
• Making Security Central To Your DevOps Pipeline
• Strengthen and Scale Security Using DevSecOps
• DSOVS (OWASP DevSecOps Verification Standard)

1. Design

Development Lifecycle Resources:

• SDL(Secure Development Lifecycle) by Microsoft
• OWASP Software Assurance Maturity Model
• Building Security In Maturity Model (BSIMM)
• NIST’s Secure Software Development Framework
• DevSecOps basics: 9 tips for shifting left (GitLab)

 
... (More resources detailing design practices) ...

2. Develop

Secure Coding Resources:

• Secure Coding Guide by Apple
• Secure Coding Guidelines for Java SE

Security of CICD

GitHub Actions

• Security Hardening for GitHub Actions
• GitHub Actions Security Best Practices

Awesome Resources

Awesome DevSecOps List

Other Roadmaps

Wrap Up

If you think the roadmap can be improved, please do open a PR with any updates and submit any issues. Also, I will continue to improve this, so you might want to star this repository to revisit.

Idea from: Go Developer Roadmap

Contributors

Troubleshooting Tips

If you’re encountering issues while navigating through the roadmap or resources, consider the following troubleshooting tips:

• Make sure that all links are accessible; sometimes network issues can cause pages to go down.
• Recheck any browser settings that might be blocking scripts or images, as this can affect your viewing experience.
• Clear your browser cache to ensure you’re not loading outdated versions of the pages.

For more insights, updates, or to collaborate on AI development projects, stay connected with fxis.ai.

At fxis.ai, we believe that such advancements are crucial for the future of AI, as they enable more comprehensive and effective solutions. Our team is continually exploring new methodologies to push the envelope in artificial intelligence, ensuring that our clients benefit from the latest technological innovations.