DevSecOps

americanhanko/windows-security-cve-2017-8543

InSpec profile to verify a node is patched and compliant for CVE-2017-8543

melonsmasher/chef_tissues

Install patch for CVE-2017-0145 AKA WannaCry.

chef-boneyard/bash-shellshock

DEPRECATED: Chef cookbook to audit & remediate "Shellshock" (BASH-CVE-2014-7169)

alexzorin/cve-2017-2636-el

Ansible role for workaround for CVE-2017-2636 (Red Hat) - https://access.redhat.com/security/cve/CVE-2017-2636

videns/vulners-scanner

Vulnerability scanner based on vulners.com audit API

rgielen/struts1filter

A request parameter filter solution for Struts 1 CVE-2014-0114 based on the work of Alvaro Munoz and the HP Fortify team

pgporada/ansible-role-cve

Mitigates CVE-2016-5195 aka DirtyCOW

istenrot/centos-dirty-cow-ansible

Ansible playbook automating CVE-2016-5195 (Dirty COW) mitigation on CentOS/Scientific Linux using SystemTap kernel module generation.

meersjo/ansible-mysql-cve-2016-6662

Simple ansible playbook to patch mysql servers against CVE-2016-6662

konstantin-kelemen/mysqld_safe-cve-2016-6662-patch

Ansible playbook that applies the Percona patch for CVE-2016-6662 to the mysqld_safe file on CentOS and FreeBSD systems.

chusiang/cve-2016-3714.ansible.role

Fix ImageMagick Command Injection (CVE-2016-3714) with Ansible.

jackdpeterson/imagick_secure_puppet

Puppet module to harden ImageMagick policy.xml against CVE-2016-3714 by restricting dangerous image processing directives.

nickanderson/cfengine-cve-2016-2118

An example detection and remediation policy.

f88/ghostbusters15

Playbooks 'Fix for CVE-2015-0235(GHOST)' running on Ansible

gina-alaska/bash-cve-2014-7169-cookbook

Chef cookbook to detect and patch the Shellshock (CVE-2014-7169) bash vulnerability across servers using automated configuration management.

owasp/rbac

PHP-RBAC is an authorization library for PHP. It provides developers with NIST Level 2 Standard Role Based Access Control and more, in the fastest…