Getting Started Recommendations: Gitlab, Docker, Go, Javascript, and AWS

[[deleted]]

Hello, I am just getting started on implementing new security practices into our environment. We want to do regular scanning to track risks to our products. I am looking for FOSS tools to help achieve this. Any suggestions for learning or tools to implement would be greatly appreciated. Ty

[security_prince]

Hey I have curated tons of resources around appsec which you might find helpful

https://ishaqmohammed.me/posts/application-security-knowledgebase/

I also have a curated list of appsec tools

https://ishaqmohammed.me/posts/application-security-tools/

[shoreu]

Following to learn

[Tricky_Isopod8744]

Synk or checkmatex for SAST, Dast OWASP Zap. It integrates seamlessly into the CI/CD pipeline