Security Resources

Reports
Shifting Docker security left
Snyking in
Directory traversal vulnerability exploit in the st package
Snyking in
Regular expression denial of service vulnerability exploit in the ms package
Videos
Switching on DevSecOps
Videos
Who owns open source security
Videos
Securing Serverless by breaking in
Videos
Developers as a malware distribution vehicle
Videos
Serverless Security: What’s Left To Protect
Videos
How to break into your application: A live hack
Videos
Writing Secure JavaScript - JS Kongress 2016
Cheat sheet
Snyk CLI cheat sheet
Cheat sheet
10 npm Security Best Practices
Cheat sheet
Python Security Best Practices Cheat Sheet
Cheat sheet
10 Docker Image Security Best Practices
Reports
The state of open source security - 2019
Cheat sheet
Zip Slip Vulnerability Cheat Sheet
Cheat sheet
Local Type Inference Cheat Sheet for Java 10 and beyond
Cheat sheet
10 Maven Security Best Practices
Cheat sheet
10 Spring Boot Security Best Practices
Cheat sheet
10 GitHub Security Best Practices
Reports
JVM Ecosystem Report 2018
Reports
The State of Open Source Security 2017