Skip to content

@appsecengineer appsecengineer

All

    Repositories list

    73 repositories

    • cosign-ci

      Public
      HTML
      •
      Apache License 2.0
      •1•1•0•0•Updated Sep 17, 2025Sep 17, 2025

    • gh-actions-ami

      Public
      HCL
      •0•0•0•0•Updated Jul 30, 2025Jul 30, 2025

    • devsecops-gh-actions

      Public
      Python
      •5•1•0•0•Updated Jul 25, 2025Jul 25, 2025

    • gh-actions-command-injection

      Public
      HCL
      •0•0•0•0•Updated Jul 18, 2025Jul 18, 2025

    • gh-actions-poisoned-pipeline-execution

      Public
      HCL
      •0•0•0•0•Updated Jul 18, 2025Jul 18, 2025

    • Azure_ZAP_Pipeline_DAST

      Public
      Python
      •2•0•0•0•Updated May 21, 2025May 21, 2025

    • gh-actions-zap-full

      Public
      Python
      •7•1•0•1•Updated Apr 10, 2025Apr 10, 2025

    • gh-actions-trivy

      Public
      JavaScript
      •5•1•0•0•Updated Apr 9, 2025Apr 9, 2025

    • acr-devops-image-scan

      Public
      Python
      •0•0•0•0•Updated Jan 27, 2025Jan 27, 2025

    • terraform-aws-cloudfront

      Public
      HCL
      •0•0•0•0•Updated Jan 24, 2025Jan 24, 2025

    • terraform-azure-acr

      Public
      HCL
      •0•0•0•0•Updated Jan 9, 2025Jan 9, 2025

    • gh-include-aws-detect

      Public
      HCL
      •0•0•0•0•Updated Dec 23, 2024Dec 23, 2024

    • gh-includes-aws

      Public
      HTML
      •0•0•0•0•Updated Dec 11, 2024Dec 11, 2024

    • argocd-course

      Public
      0•0•0•0•Updated Sep 10, 2024Sep 10, 2024

    • gitlab-ci-dso

      Public
      0•0•0•0•Updated Aug 4, 2024Aug 4, 2024

    • gh-actions-nodejsscan

      Public
      JavaScript
      •12•1•0•0•Updated Aug 2, 2024Aug 2, 2024

    • defence-docker

      Public
      HTML
      •0•0•0•0•Updated Jul 13, 2024Jul 13, 2024

    • devsecops-gitlab-ci

      Public
      Python
      •4•2•0•0•Updated Jul 4, 2024Jul 4, 2024

    • go-ssrf

      Public
      Sample Go app to demonstrate ssrf vulnerabilities
      Go
      •0•0•0•0•Updated May 28, 2024May 28, 2024

    • go-csrf

      Public
      a sample go app that is intentionally vulnerable to csrf attacks
      HTML
      •0•0•0•0•Updated May 28, 2024May 28, 2024

    • django-path-traversal

      Public
      Sample django app to demonstrate path traversal vulnerabilities
      Python
      •0•0•0•0•Updated May 28, 2024May 28, 2024

    • ruby-sqli

      Public
      a sample to-do ruby app that is intentionally vulnerable to sqli
      Ruby
      •0•0•0•0•Updated May 27, 2024May 27, 2024

    • ruby-ssti

      Public
      an example ruby erb app vulnerable to ssti
      Dockerfile
      •1•0•0•0•Updated May 27, 2024May 27, 2024

    • python-urllib

      Public
      a dockerised python application that has path traversal vulnerabilities
      Python
      •0•0•0•0•Updated May 27, 2024May 27, 2024

    • angular-xss

      Public
      Angular app that is deliberately vulnerable to XSS style attacks
      TypeScript
      •0•0•0•0•Updated May 27, 2024May 27, 2024

    • json-schema-validator

      Public
      Validates incoming JSON against a schema
      JavaScript
      •0•0•0•0•Updated May 27, 2024May 27, 2024

    • jwt-showcase

      Public
      an example jwt app written in go showcasing custom claims
      Go
      •0•0•0•0•Updated May 27, 2024May 27, 2024

    • terraform-aws-eks

      Public
      HCL
      •0•0•0•0•Updated May 24, 2024May 24, 2024

    • falco-docker-set

      Public
      a docker compose file to orchestrate falco and a set of containers to showcase findings
      Dockerfile
      •
      Apache License 2.0
      •0•0•0•0•Updated Apr 30, 2024Apr 30, 2024

    • gitlab-ci-python-defectdojo

      Public
      Python
      •0•1•0•0•Updated Feb 21, 2024Feb 21, 2024
    ProTip! When viewing an organization's repositories, you can use the props. filter to filter by custom property.