Skip to content

Commit aff7e76

Browse files
committed
add snyk to model
1 parent 3945932 commit aff7e76

File tree

2 files changed

+3
-3
lines changed

2 files changed

+3
-3
lines changed

_includes/components/sidebar.html

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -63,7 +63,7 @@
6363
{{ nav_footer_custom }}
6464
{% else %}
6565
<footer class="site-footer">
66-
<a href="https://blog.devsecopsguides.com/"><b>Blog</b></a>
66+
<a href="https://blog.devsecopsguides.com/"><b>Blog</b></a><br>
6767
<a href="https://join.slack.com/t/devsecopsguides/shared_invite/zt-1yc37gckk-zeg3jnA0GdCSYqGlFs2Ppw"><b>Slack</b></a>
6868
</footer>
6969
{% endif %}

docs/model/simple.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -21,8 +21,8 @@ DevSecOps simple model more focus on fast and scalable
2121
| Stages | Description | Tools |
2222
|:-------------|:------------------|:------|
2323
| Threat Modeling | Identify and analyze potential security threats and vulnerabilities in the system design and architecture. | Microsoft Threat Modeling Tool, Pytm |
24-
| SAST (Static Application Security Testing) | Analyze source code to identify security vulnerabilities and coding flaws. | SonarQube - Checkmarx - Fortify - Veracode |
25-
| SCA (Software Composition Analysis) | Identify and manage open-source and third-party components for known vulnerabilities and license compliance. | Sonatype Nexus Lifecycle - WhiteSource - Black Duck |
24+
| SAST (Static Application Security Testing) | Analyze source code to identify security vulnerabilities and coding flaws. | Snyk - SonarQube - Checkmarx - Fortify - Veracode |
25+
| SCA (Software Composition Analysis) | Identify and manage open-source and third-party components for known vulnerabilities and license compliance. | Snyk - Sonatype Nexus Lifecycle - WhiteSource - Black Duck |
2626
| Secure Pipeline | Implement security controls and best practices in the CI/CD pipeline to ensure the integrity and security of the software delivery process. | Jenkins - GitLab CI/CD - CircleCI |
2727
| Real-time distributed messaging platforms | Utilize messaging platforms for real-time communication, collaboration, and incident response. | Slack - Microsoft Teams - Mattermost - Discord |
2828
| Artifacts | Securely manage and store build artifacts, such as Docker images or software packages. | Docker Registry - Nexus Repository Manager - JFrog Artifactory |

0 commit comments

Comments
 (0)