Ready-to-use application security pipeline templates that wire industry-standard scanners into your CI/CD across Azure DevOps, GitHub, and GitLab. Each template maps to one or more DevSecOps control families.
104 templates · 3 platforms · 15 control families · 25 tool providers
Anchore Grype Vulnerability Scan (Container Image Scanning). A AzureDevOps Application Security template implementing Container Image Scanning via Anchore.
Anchore Syft SBOM Scan. A AzureDevOps Application Security template implementing Software Composition Analysis via Anchore.
Bandit Scan (Python). A AzureDevOps Application Security template implementing Static Application Security Testing via PyCQA.
Chain Bench SCM Scanning. A AzureDevOps Application Security template implementing DOCC via Aqua Security.
Checkmarx KICS IaC Scan (ADO). A AzureDevOps Application Security template implementing Infrastructure as Code Security via Checkmarx.
Checkov IaC Scan (ADO). A AzureDevOps Application Security template implementing Infrastructure as Code Security via Bridgecrew (Prisma Cloud).
CodeQL via GHAzDO. A AzureDevOps Application Security template implementing Static Application Security Testing via Microsoft.
Compliance Audit. A AzureDevOps Application Security template implementing Container Image Scanning via DevOps Shield.
DefectDojo Integration with Key Vault. A AzureDevOps Application Security template implementing Secret Scanning via DefectDojo.
DefectDojo Integration with Variable Group. A AzureDevOps Application Security template implementing Secret Scanning via DefectDojo.
Defender for Cloud - CIS Benchmark Assessment (ADO). A AzureDevOps Application Security template implementing Container Image Scanning via Microsoft.
Defender for Cloud - DevOps Connector Onboarding (ADO). A AzureDevOps Application Security template implementing Posture via Microsoft.
Defender for Cloud - Security Posture Sync (ADO). A AzureDevOps Application Security template implementing Posture via Microsoft.
Dependency Track. A AzureDevOps Application Security template implementing Software Composition Analysis via OWASP.
DevOps Shield Security Scanner. A AzureDevOps Application Security template implementing DOCC via DevOps Shield.
ESLint SAST (ADO). A AzureDevOps Application Security template implementing Static Application Security Testing via OpenJS Foundation.
GHAzDO Dependency Scanning. A AzureDevOps Application Security template implementing Software Composition Analysis via Microsoft.
GHAzDO Secret Scanning. A AzureDevOps Application Security template implementing Secret Scanning via Microsoft.
GitHub Copilot Security Agent (ADO). A AzureDevOps Application Security template implementing Static Application Security Testing via GitHub.
Gitleaks Secret Scanning. A AzureDevOps Application Security template implementing Secret Scanning via Gitleaks.
Kubesec Scanner. A AzureDevOps Application Security template implementing Static Application Security Testing via ControlPlane.
Mend. A AzureDevOps Application Security template implementing Software Composition Analysis via Mend.
Microsoft SBOM Generator (ADO). A AzureDevOps Application Security template implementing Software Composition Analysis via Microsoft.
Microsoft Security DevOps (MSDO) - Defender for DevOps. A AzureDevOps Application Security template implementing Static Application Security Testing via Microsoft.
Nightly Deep Scan. A AzureDevOps Application Security template implementing Infrastructure as Code Security via DevOps Shield.
OpenSSF Scorecard. A AzureDevOps Application Security template implementing Software Composition Analysis via OpenSSF.
OSV Scanner. A AzureDevOps Application Security template implementing Software Composition Analysis via Google.
PSScriptAnalyzer (PowerShell). A AzureDevOps Application Security template implementing Static Application Security Testing via Microsoft.
Pull Request Fast Lane. A AzureDevOps Application Security template implementing Static Application Security Testing via DevOps Shield.
Release Gate. A AzureDevOps Application Security template implementing Container Image Scanning via DevOps Shield.
SonarQube Scan .NET. A AzureDevOps Application Security template implementing Static Application Security Testing via SonarSource.
SonarQube Scan Java. A AzureDevOps Application Security template implementing Static Application Security Testing via SonarSource.
SonarQube Scan Python. A AzureDevOps Application Security template implementing Static Application Security Testing via SonarSource.
tfsec IaC Scanning (Terraform). A AzureDevOps Application Security template implementing Infrastructure as Code Security via Aqua Security.
Trivy Container Image Scanning. A AzureDevOps Application Security template implementing Container Image Scanning via Aqua Security.
TruffleHog Secret Scanning. A AzureDevOps Application Security template implementing Secret Scanning via Truffle Security Co..
Zed Attack Proxy (ZAP) Penetration Testing. A AzureDevOps Application Security template implementing Dynamic Application Security Testing via Checkmarx.
Anchore Grype Vulnerability Scan (Container Image Scanning). A GitHub Application Security template implementing Container Image Scanning via Anchore.
Anchore Syft SBOM Scan. A GitHub Application Security template implementing Software Composition Analysis via Anchore.
Bandit Scan (Python). A GitHub Application Security template implementing Static Application Security Testing via PyCQA.
Chain Bench SCM Scanning. A GitHub Application Security template implementing DOCC via Aqua Security.
Checkmarx KICS IaC Scan. A GitHub Application Security template implementing Infrastructure as Code Security via Checkmarx.
Checkov IaC Scan. A GitHub Application Security template implementing Infrastructure as Code Security via Bridgecrew (Prisma Cloud).
CodeQL Advanced SAST. A GitHub Application Security template implementing Static Application Security Testing via GitHub.
Compliance Audit. A GitHub Application Security template implementing Container Image Scanning via DevOps Shield.
Defender for Cloud - CIS Benchmark Assessment. A GitHub Application Security template implementing Container Image Scanning via Microsoft.
Defender for Cloud - DevOps Connector Onboarding. A GitHub Application Security template implementing Posture via Microsoft.
Defender for Cloud - Security Posture Sync. A GitHub Application Security template implementing Posture via Microsoft.
DevOps Shield Security Scanner. A GitHub Application Security template implementing DOCC via DevOps Shield.
ESLint SAST (JavaScript/TypeScript). A GitHub Application Security template implementing Static Application Security Testing via OpenJS Foundation.
GHAS Posture Enforcement. A GitHub Application Security template implementing Secret Scanning via GitHub.
GitHub Copilot Security Agent. A GitHub Application Security template implementing Static Application Security Testing via GitHub.
GitHub Dependency Review. A GitHub Application Security template implementing Software Composition Analysis via GitHub.
GitHub Secret Scanning Posture. A GitHub Application Security template implementing Secret Scanning via GitHub.
Gitleaks Secret Scanning. A GitHub Application Security template implementing Secret Scanning via Gitleaks.
Kubesec Scanner. A GitHub Application Security template implementing Static Application Security Testing via ControlPlane.
Microsoft SBOM Generator. A GitHub Application Security template implementing Software Composition Analysis via Microsoft.
Microsoft Security DevOps (MSDO) - Defender for DevOps. A GitHub Application Security template implementing Static Application Security Testing via Microsoft.
Nightly Deep Scan. A GitHub Application Security template implementing Infrastructure as Code Security via DevOps Shield.
Nuclei DAST Scanning. A GitHub Application Security template implementing Dynamic Application Security Testing via ProjectDiscovery.
OpenSSF Scorecard. A GitHub Application Security template implementing Software Composition Analysis via OpenSSF.
OSV Scanner. A GitHub Application Security template implementing Software Composition Analysis via Google.
OWASP Dependency Track. A GitHub Application Security template implementing Software Composition Analysis via OWASP.
PSScriptAnalyzer (PowerShell). A GitHub Application Security template implementing Static Application Security Testing via Microsoft.
Pull Request Fast Lane. A GitHub Application Security template implementing Static Application Security Testing via DevOps Shield.
Release Gate. A GitHub Application Security template implementing Container Image Scanning via DevOps Shield.
Semgrep Multi-language SAST. A GitHub Application Security template implementing Static Application Security Testing via Semgrep (r2c).
SonarQube Scan (Multi-language). A GitHub Application Security template implementing Static Application Security Testing via SonarSource.
tfsec IaC Scanning (Terraform). A GitHub Application Security template implementing Infrastructure as Code Security via Aqua Security.
Trivy Container Image Scanning. A GitHub Application Security template implementing Container Image Scanning via Aqua Security.
TruffleHog Secret Scanning. A GitHub Application Security template implementing Secret Scanning via Truffle Security Co..
Zed Attack Proxy (ZAP) Penetration Testing. A GitHub Application Security template implementing Dynamic Application Security Testing via Checkmarx.
Anchore Grype Container Vulnerability Scan. A GitLab Application Security template implementing Container Image Scanning via Anchore.
Bandit Scan (Python). A GitLab Application Security template implementing Static Application Security Testing via PyCQA.
Chain-bench Supply-chain CIS Compliance Audit. A GitLab Application Security template implementing DOCC via Aqua Security.
Checkmarx KICS IaC Scanner. A GitLab Application Security template implementing Infrastructure as Code Security via Checkmarx.
Checkov IaC Scan. A GitLab Application Security template implementing Infrastructure as Code Security via Bridgecrew (Prisma Cloud).
CodeQL CLI Multi-language SAST. A GitLab Application Security template implementing Static Application Security Testing via GitHub.
DAST Nightly Bundle. A GitLab Application Security template implementing Dynamic Application Security Testing via DevOps Shield.
Defender for Cloud - Security Posture Sync. A GitLab Application Security template implementing DFC via Microsoft.
DevOps Shield Security Scanner. A GitLab Application Security template implementing DOCC via DevOps Shield.
GitHub Copilot Security Agent (GitLab). A GitLab Application Security template implementing Static Application Security Testing via GitHub.
GitLab Native Secret Detection. A GitLab Application Security template implementing Secret Scanning via GitLab.
Gitleaks Secret Scanning. A GitLab Application Security template implementing Secret Scanning via Gitleaks.
MEND Software Composition Analysis. A GitLab Application Security template implementing Software Composition Analysis via MEND (formerly WhiteSource).
Nightly Comprehensive Scan. A GitLab Application Security template implementing Static Application Security Testing via DevOps Shield.
OpenSSF Scorecard. A GitLab Application Security template implementing Software Composition Analysis via OpenSSF.
OSV Scanner. A GitLab Application Security template implementing Software Composition Analysis via Google.
OWASP Dependency-Track Upload. A GitLab Application Security template implementing Software Composition Analysis via OWASP / Dependency-Track.
OWASP ZAP Full Scan (DAST). A GitLab Application Security template implementing Dynamic Application Security Testing via OWASP / ZAP.
Pre-release Must-pass Bundle. A GitLab Application Security template implementing Static Application Security Testing via DevOps Shield.
ProjectDiscovery Nuclei DAST. A GitLab Application Security template implementing Dynamic Application Security Testing via ProjectDiscovery.
Pull Request Fast Lane (Merge Request). A GitLab Application Security template implementing Static Application Security Testing via DevOps Shield.
Pull Request Full Bundle (Merge Request). A GitLab Application Security template implementing Static Application Security Testing via DevOps Shield.
Semgrep Multi-language SAST. A GitLab Application Security template implementing Static Application Security Testing via Semgrep (r2c).
SonarQube Community Edition Scan. A GitLab Application Security template implementing Static Application Security Testing via SonarSource.
SonarQube Developer Edition Scan. A GitLab Application Security template implementing Static Application Security Testing via SonarSource.
SonarQube Enterprise Edition Scan. A GitLab Application Security template implementing Static Application Security Testing via SonarSource.
tfsec IaC Scanning (Terraform). A GitLab Application Security template implementing Infrastructure as Code Security via Aqua Security.
Trivy Container Image Scanning. A GitLab Application Security template implementing Container Image Scanning via Aqua Security.
TruffleHog Secret Scanning. A GitLab Application Security template implementing Secret Scanning via Truffle Security Co..
Yelp detect-secrets Scan. A GitLab Application Security template implementing Secret Scanning via Yelp.
🚫 Defender for Cloud Connector (Unsupported on GitLab). A GitLab Application Security template implementing DFC via Microsoft.
🚫 Microsoft Security DevOps (Unsupported on GitLab). A GitLab Application Security template implementing MSDO via Microsoft.
Copyright © DevOps Shield. All Rights Reserved. Privacy Policy | Cookie Policy | Terms and Conditions | v1.0.9