The DevSecOps Field Manual

In the Style of the RTFM and the BTFM

--> Using groff for better Stying

Build / Depencencies

use build.sh

https://www.troff.org/TheGroffFriendsHowto.pdf

https://github.com/Gavinok/ghighlight

source-highlight

brew install gs

Topics

--> Every Topic has 1 page, max 2!

• 1. Basics
  • 1.1 DevSecOps Workflow
  • 1.2 Links
  • 1.3 ssh
  • 1.4 git
• 2. Dev
  • 2.1 Basic Rules
  • 2.2 5 Ideals
  • 2.3 Requirements
  • 2.4 Architecture
  • 2.4 REST over http
  • 2.5 Linting
  • 2.6 testing
  • 2.7 deployment
  • 2.8 documentation
  • 2.9 gitlab
  • 2.10 docker
  • 2.11 sonarqube
  • 2.12 npm registry
  • 2.13 prometheus
  • 2.14 grafana
  • 2.15 graylog
• 3. Sec
  • 3.1 zed attack proxy
  • 3.2 sqlmap
  • 3.3 openvas
  • 3.4 sast
  • 3.5 best practices
  • 3.6 npm audit
  • 3.7 npm outdated
• 4. Ops
  • 4.2 nginx
  • 4.3 node.js
  • 4.4 pm2
  • 4.5 mysql
  • 4.6 mongodb
  • 4.7 rabbitmq
  • 4.8 nagios
  • 4.9 kubernetes
  • 4.10 certificates / ssl
  • 4.11 sonarqube
  • 4.12 npm registry
  • 4.13 prometheus
  • 4.14 grafana
  • 4.15 graylog

The Easy Project Field Manual

--> This is another Book ...