DevSecOps-Lab

WORK IN PROGRESS

A DevSecOps Lab, that helps to learn 'Activities' described in DSOMM (DevSecOps Maturity Model by OWASP) -> https://dsomm.timo-pagel.de/

What I want this to be:

• Concentrated on Being Free! and to be running Locally <- This can be really hard to achieve, especially when most DevSecOps features are provided by the Cloud, and also that there're many problems especially problematic on the Cloud, like Access Controls

Things out of Scope:

• Education and Guidance <- Culture and Organization

TODO

• Setup Script to Autogenerate RSA Keys for the servers and copy them into Vagrant Main Server
  • Actually this can be done with vagrant provision
• Learn how to parse the contents of Inventory Files to perform better automation
• Setup GitLab Community Edition
• Server that is hosting the app