You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: README.md
+3-1Lines changed: 3 additions & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -33,7 +33,7 @@ Create issues or even better Pull Requests in [github](https://github.com/wurstb
33
33
# Assessment
34
34
In case you would like to perform a DevSecOps assessment, the following tools are available:
35
35
* Usage of the applicaton in a `container`.
36
-
* Development of an export to (OWASP Maturity Models)[https://github.com/OWASP/Maturity-Models] (recommended for assessments with a lot of teams)
36
+
* Development of an export to [OWASP Maturity Models](https://github.com/OWASP/Maturity-Models) (recommended for assessments with a lot of teams)
37
37
* Creation of your excel sheet (not recommended, you want to use DevOps, don't even try!)
38
38
39
39
## Container
@@ -86,6 +86,8 @@ docker run -d -p 80:80 wurstbrot/dsomm:latest
86
86
* The dimension _Test and Verifiacation_ is based on Christian Schneiders [Security DevOps Maturity Model (SDOMM)](https://www.christian-schneider.net/SecurityDevOpsMaturityModel.html). _Application tests_ and _Infrastructure tests_ are added by Timo Pagel. Also, the sub-dimension _Static depth_ has been evaluated by security experts at [OWASP Stammtisch Hamburg](https://www.owasp.org/index.php/OWASP_German_Chapter_Stammtisch_Initiative/Hamburg).
87
87
* The sub-dimension <i>Process</i> has been added after a discussion with [Francois Raynaud](https://www.linkedin.com/in/francoisraynaud/) that reactive activities are missing.
88
88
* Enhancement of my basic translation is performed by [Claud Camerino](https://github.com/clazba).
89
+
* Adding ISO 27001:2017 mapping, [Andre Baumeier](https://github.com/AndreBaumeier).
90
+
* Providing a documentation of how to use `docker` in the Juice Shop for simple copy&paste, [Björn Kimminich](https://github.com/bkimminich/).
89
91
90
92
# Back link
91
93
-[OWASP DevSecOps maturity model page](https://dsomm.timo-pagel.de/)
0 commit comments