OWASP AppSec Pipeline - Revision history

Aaron.weaver2 at 16:39, 25 March 2018

2018-03-25T16:39:21Z

Aaron.weaver2: /* Related Projects */

2018-03-25T16:32:59Z

‎Related Projects

Aaron.weaver2: /* Pipeline - Deliver */

2017-12-11T14:40:34Z

‎Pipeline - Deliver

Aaron.weaver2 at 14:38, 11 December 2017

2017-12-11T14:38:21Z

Mtesauro: Added a few categories to the page

2017-06-04T05:05:24Z

Added a few categories to the page

Aaron.weaver2: /* Docker AppSec Pipeline Release */

2016-09-19T19:50:28Z

‎Docker AppSec Pipeline Release

Aaron.weaver2: /* AppSec ToolBox Release */

2016-09-19T19:49:57Z

‎AppSec ToolBox Release

Aaron.weaver2: /* News and Events */

2016-09-19T19:39:38Z

‎News and Events

Aaron.weaver2: /* Quick Download */

2016-09-19T19:38:31Z

‎Quick Download

Aaron.weaver2: /* News and Events */

2016-09-19T19:38:14Z

‎News and Events

@@ Line 34: / Line 34: @@
 == Contributors ==
-[mailto:adam@parsons.cloud Adam Parsons]<br />
+<br />
 == Related Projects ==
@@ Line 132: / Line 131: @@
 '''Recommended Tools'''
 A complete listing of tools and review will be in the Pipeline Tools section.
-*[https://github.com/PearsonEducation/bag-of-holding Bag of Holding] : An application security utility to assist in the organization and prioritization of software security activities.
+* : An application security utility to assist in the organization and prioritization of software security activities and defect tracking application.
-**Dashboard showing entire application portfolio and last assessment date
+**Dashboard showing entire application portfolio and last engagement dates
-**Applications requiring assessments
+**Applications requiring engagements
-**Managing the work load for assessments
+**Importers for many scanners
-**KPI's around application workload
+**Integration with Jira
-**Tracking of dev team training and overall maturity
+**API for integration with security tools
 ===Pipeline - Triage ===
@@ Line 177: / Line 175: @@
 '''AppSec Pipeline Presentations'''
-*[https://www.youtube.com/watch?v=1CDSOSl4DQU Building An AppSec Pipeline] Aaron Weaver - AppSec EU 2015 <br />
+*[https://www.youtube.com/watch?v=1CDSOSl4DQU Building An AppSec Pipeline] Aaron Weaver - AppSec EU 2015
 *[https://www.youtube.com/watch?v=tDnyFitE0y4 Taking DevOps Practices Into Your AppSec Life] Matt Tesauro - AppSec EU 2015
@@ Line 192: / Line 190: @@
 =Milestones=
-===AppSec Plugin Index Initial Release ===
+===Dockers Released ===
-*Release AppSec ToolBox and Call for PR: January 10, 2017
+*Released [https://hub.docker.com/u/appsecpipeline/ AppSec Docker]
-===Docker AppSec Pipeline Release===
+===Docker AppSec Pipeline Specification Released===
-*Beta Release: January 10, 2017
+*Beta Release: View the [https://github.com/appsecpipeline/AppSecPipeline-Specification Github repo] and specification
 =FAQs=

@@ Line 40: / Line 40: @@
 [[OWASP_Web_Testing_Environment_Project]]
 <!-- DO NOT ALTER OR REMOVE THE TEXT ON NEXT LINE -->| valign="top" style="padding-left:25px;width:200px;" |
 == News and Events ==
-[https://appsecusa2016.sched.org/event/7t9g/appsec-take-the-best-of-agile-devops-and-cicd-into-your-appsec-program AppSecUS 2016 AppSec++ Take the best of Agile, DevOps and CI/CD into your AppSec Program]
+[https://raw.githubusercontent.com/appsecpipeline/AppSecPipeline-Specification/master/reference/diagrams/pipeline-static.png AppSecPipeline Specification Diagram]
 == In Print ==

@@ Line 5: / Line 5: @@
 <!-- DO NOT ALTER OR REMOVE THE TEXT ON NEXT LINE -->
 {| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
-| valign="top"  style="border-right: 1px dotted gray;padding-right:25px;" |
+| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |
 ==The OWASP AppSec Rugged DevOps Pipeline Project==
@@ Line 21: / Line 21: @@
 <!-- DO NOT ALTER OR REMOVE THE TEXT ON NEXT LINE -->
-| valign="top"  style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |
+| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |
 == What is the OWASP AppSec Pipeline Project? ==
@@ Line 30: / Line 30: @@
 [mailto:matt.tesauro@owasp.org Matt Tesauro]<br />
-[mailto:aaron.weaver2@gmail.com Aaron Weaver]<br/>
+[mailto:aaron.weaver2@gmail.com Aaron Weaver]<br />
 == Contributors ==
 [mailto:adam@parsons.cloud Adam Parsons]<br />
-[mailto:matt.konda@owasp.org Matt Konda]<br/>
+[mailto:matt.konda@owasp.org Matt Konda]<br />
 == Related Projects ==
@@ Line 42: / Line 42: @@
-<!-- DO NOT ALTER OR REMOVE THE TEXT ON NEXT LINE -->
+<!-- DO NOT ALTER OR REMOVE THE TEXT ON NEXT LINE -->| valign="top" style="padding-left:25px;width:200px;" |
 == News and Events ==
@@ Line 54: / Line 53: @@
 ==Classifications==
     {| width="200" cellpadding="2"
     |-
-    | align="center" valign="top" width="50%" rowspan="2"| [[File:New projects.png|100px|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects]]
+    | rowspan="2" align="center" valign="top" width="50%" | [[File:New projects.png|100px|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects]]
-    | align="center" valign="top" width="50%"| [[File:Owasp-breakers-small.png|link=]]
+    | align="center" valign="top" width="50%" | [[File:Owasp-breakers-small.png|link=]]
     |-
-    | align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=]]
+    | align="center" valign="top" width="50%" | [[File:Owasp-defenders-small.png|link=]]
     |-
-    | colspan="2" align="center"  | [[File:Cc-button-y-sa-small.png|link=http://creativecommons.org/licenses/by-sa/3.0/]]
+    | colspan="2" align="center" | [[File:Cc-button-y-sa-small.png|link=http://creativecommons.org/licenses/by-sa/3.0/]]
     |-
-    | colspan="2" align="center"  | [[File:Project_Type_Files_DOC.jpg|link=]]<br /> <br />[[File:Project_Type_Files_CODE.jpg|link=]]<br /> <br />[[File:Project_Type_Files_TOOL.jpg|link=]]
+    | colspan="2" align="center" | [[File:Project_Type_Files_DOC.jpg|link=]]<br /> <br />[[File:Project_Type_Files_CODE.jpg|link=]]<br /> <br />[[File:Project_Type_Files_TOOL.jpg|link=]]
     |}
 |}
 =Pipeline Tools=
@@ Line 136: / Line 133: @@
 '''Recommended Tools'''
 A complete listing of tools and review will be in the Pipeline Tools section.
-*[https://github.com/PearsonEducation/bag-of-holding Bag of Holding ]: An application security utility to assist in the organization and prioritization of software security activities.
+*[https://github.com/PearsonEducation/bag-of-holding Bag of Holding] : An application security utility to assist in the organization and prioritization of software security activities.
 **Dashboard showing entire application portfolio and last assessment date
 **Applications requiring assessments
@@ Line 196: / Line 193: @@
 =Milestones=
-===AppSec ToolBox Release===
+===AppSec Plugin Index Initial Release ===
-*Release AppSec ToolBox and Call for PR: October 30, 2016
+*Release AppSec ToolBox and Call for PR: January 10, 2017
 ===Docker AppSec Pipeline Release===
-*Preview Release: October 17, 2016
+*Beta Release: January 10, 2017
 =FAQs=
@@ Line 217: / Line 214: @@
 Besides the project leaders, contributions have been made by:
-* [https://github.com/aparsons Adam Parsons] - Bag of Holding
 = Getting Involved =

@@ Line 9: / Line 9: @@
 ==The OWASP AppSec Rugged DevOps Pipeline Project==
-The OWASP AppSec Rugged DevOps Pipeline Project is the place to find the information you need to increase the speed and automation of your AppSec program.  Using the documentation and references of this project will allow you to setup your own AppSec Pipeline.
+The OWASP AppSec Rugged DevOps Pipeline Project is the place to find the information you need to increase the speed and automation of your AppSec program.  Using the sample implementation, documentation and references of this project will allow you to setup your own AppSec Pipeline.
 ==Description==
 The AppSec pipeline project is a place to gather together information, techniques and tools to create your own AppSec Pipeline.  AppSec Pipelines takes the
-principles of DevOps and Lean and applies that to an application security program.  The project will gather references, cheat sheets, and specific guidance for tools/software which would compose an AppSec Pipeline.
+principles of DevOps and Lean and applies that to an application security program.  The project will gather references, code, and specific guidance for tools/software which would compose an AppSec Pipeline.
 ==Licensing==

← Older revision		Revision as of 05:05, 4 June 2017
Line 246:		Line 246:
	__NOTOC__ <headertabs />		__NOTOC__ <headertabs />

−	[[Category:OWASP Project]] [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Document]]	+	[[Category:OWASP Project]]
		+	[[Category:OWASP_Builders]]
		+	[[Category:OWASP_Defenders]]
		+	[[Category:OWASP_Document]]
		+	[[Category:Projects\|AppSec Pipeline]]
		+	[[Category:Incubator Projects\|AppSec Pipeline]]
		+	[[Category:OWASP AppSec Pipeline\|AppSec Pipeline]]

@@ Line 50: / Line 50: @@
 == News and Events ==
-[https://2016.appsec.eu/?page_id=43 AppSec EU June 2016]
+[https://appsecusa2016.sched.org/event/7t9g/appsec-take-the-best-of-agile-devops-and-cicd-into-your-appsec-program AppSec++ Take the best of Agile, DevOps and CI/CD into your AppSec Program]
 == In Print ==