This repository hosts DSP AppSec internal infrastructure deployed in GCP Kubernetes. Check the documentation in this link.

• SDARQ - SDARQ is a coordination platform to guide both developers and appsec professionals through an SDLC and provide interfaces into various tools and bind them. Learn more in this link.

Tools integrated with SDARQ:

• CIS Scanner - Security scanner that assess security posture of GCP projects.
• Automated ZAP Scanner - Scripts running in GKE as Cronjobs to scan a specific list of endpoints.
• DefectDojo
• CodeDx

appsec@broadinstitute.org