Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update from develop #74

Merged
merged 7 commits into from
Sep 30, 2024
Merged

Update from develop #74

merged 7 commits into from
Sep 30, 2024

Conversation

mattaereal
Copy link
Collaborator

Frameworks PR Checklist

Thank you for contributing to the Security Frameworks! Before you open a PR, make sure to read information for contributors and take a look at following checklist:

  • Updating main with develop (tags and banner).
  • If you are touching an existing piece of content, ask the original creator for review
  • If you need feedback for your content from wider community, share the PR in our Discord
  • Review changes to ensure there are no typos, see instructions below

@mattaereal mattaereal self-assigned this Sep 30, 2024
@vercel Vercel
Copy link

vercel bot commented Sep 30, 2024

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
frameworks ✅ Ready (Inspect) Visit Preview ✅ 30 resolved Sep 30, 2024 7:18pm

@github-actions GitHub Actions
Copy link

Hi @mattaereal,

Following typos were found in the pull request:

  • 📄 ./CODE_OF_CONDUCT.md:
    1. socio
    2. sexualized
  • 📄 ./src/threat-modeling/identity-mitigate-threats.md:
    1. Devops
    2. integrations
    3. lifecycle
  • 📄 ./src/threat-modeling/create-maintain-threat-models.md:
    1. OWASP
  • 📄 ./src/security-testing/fuzz-testing.md:
    1. Fuzzers
    2. AFL
    3. executables
    4. LibFuzzer
    5. LLVM
    6. Fuzzer
    7. Mythril
  • 📄 ./src/security-testing/static-application-security-testing.md:
    1. SAST
    2. SAST
    3. SAST
    4. codebase
    5. lifecycle
    6. SAST
    7. codebase
    8. SAST
    9. SAST
    10. codebase
    11. SAST
    12. SAST
    13. SAST
    14. SonarQube
    15. Checkmarx
    16. SAST
    17. Veracode
    18. SAST
    19. SAST
    20. Solhint
  • 📄 ./src/security-testing/README.md:
    1. Devops
    2. SRE
  • 📄 ./src/security-testing/dynamic-application-security-testing.md:
    1. DAST
    2. DAST
    3. DAST
    4. DAST
    5. DAST
    6. DAST
    7. DAST
    8. DAST
    9. DAST
    10. OWASP
    11. Acunetix
    12. Veracode
    13. DAST
    14. DAST
    15. reentrancy
    16. underflows
    17. DAST
  • 📄 ./src/security-testing/security-regression-testing.md:
    1. codebase
    2. codebase
  • 📄 ./src/key-management/cold-vs-hot-wallet.md:
    1. cryptocurrencies
    2. Gapped
    3. cryptocurrency
    4. cryptocurrencies
    5. cryptocurrency
  • 📄 ./src/key-management/hardware-wallets.md:
    1. cryptocurrency
    2. Nano
    3. cryptocurrencies
    4. Nano
    5. Trezor
    6. cryptocurrencies
    7. Shamir
    8. Trezor
    9. Cryptocurrencies
    10. Nano
    11. Trezor
    12. Shamir
  • 📄 ./src/key-management/signing-schemes.md:
    1. cryptocurrency
    2. EOA
    3. Multisignature
    4. Multisig
    5. DeFi
    6. multisig
    7. customizable
    8. Multisignature
    9. DeFi
  • 📄 ./src/key-management/README.md:
    1. Cryptocurrency
    2. cryptographic
    3. EOAs
    4. Multisig
    5. cryptocurrency
    6. cryptocurrency
    7. xkcd
  • 📄 ./src/key-management/custodial-vs-non-custodial.md:
    1. cryptocurrency
    2. cryptocurrency
  • 📄 ./src/key-management/software-wallets.md:
    1. cryptocurrency
    2. DeFi
    3. walletcompare
    4. xyz
  • 📄 ./src/front-end-web-app/security-tools-resources.md:
    1. OWASP
    2. Snyk
  • 📄 ./src/front-end-web-app/web-application-security.md:
    1. XSS
    2. OWASP
    3. IPFS
  • 📄 ./src/front-end-web-app/common-vulnerabilities.md:
    1. Devops
    2. DNS
    3. devestating
    4. practises
    5. XSS
    6. CSRF
    7. IDOR
    8. OWASP
    9. OWASP
  • 📄 ./src/front-end-web-app/mobile-application-security.md:
    1. OWASP
  • 📄 ./src/front-end-web-app/README.md:
    1. Devops
    2. offical
  • 📄 ./src/intro/how-to-navigate-the-website.md:
    1. Crypto
  • 📄 ./src/intro/what-is-it.md:
    1. skillset
  • 📄 ./src/intro/introduction.md:
    1. blockchain
    2. lifecycle
  • 📄 ./src/intro/overview-of-each-framework.md:
    1. cryptographic
    2. DevSecOps
    3. IAM
    4. lifecycle
  • 📄 ./src/intro/what-it-isnt.md:
    1. curations
  • 📄 ./src/SUMMARY.md:
    1. DNS
    2. FDE
    3. DevSecOps
    4. VPN
    5. IAM
    6. RBAC
    7. DAST
    8. SAST
  • 📄 ./src/infrastructure/cloud.md:
    1. Devops
    2. SRE
    3. dapp
    4. RBAC
    5. BYOK
    6. failover
    7. GDPR
    8. GCP
    9. CloudSploit
    10. CloudSploit
  • 📄 ./src/infrastructure/ddos-protection.md:
    1. Devops
    2. SRE
    3. DRT
    4. WAF
    5. WAF
    6. WAF
    7. WAF
    8. GCP
    9. WAF
    10. VPC
    11. Stackdriver
    12. Cloudflare
    13. Akamai
    14. scalable
    15. Imperva
  • 📄 ./src/infrastructure/identity-and-access-management.md:
    1. Managemnt
    2. IAM
  • 📄 ./src/infrastructure/operating-system-security.md:
    1. Devops
    2. SRE
    3. practises
    4. NIST
    5. RBAC
    6. HIDS
    7. NIST
  • 📄 ./src/infrastructure/network-security.md:
    1. Devops
    2. SRE
    3. RDP
    4. IDPS
  • 📄 ./src/infrastructure/README.md:
    1. Devops
    2. SRE
    3. DNS
    4. DNS
    5. DNS
  • 📄 ./src/infrastructure/zero-trust-principles.md:
    1. JIT
    2. JEA
    3. IAM
    4. analytics
  • 📄 ./src/infrastructure/dns-and-domain-registration.md:
    1. DNS
    2. DNS
    3. DNS
    4. DNS
    5. DNSSEC
    6. DNS
    7. DNS
    8. WHOIS
    9. DNS
    10. DNS
    11. DNS
  • 📄 ./src/infrastructure/asset-inventory.md:
    1. Devops
    2. SRE
  • 📄 ./src/contribute/contributing.md:
    1. repo
    2. blockquotes
    3. excalidraw
    4. blockquotes
    5. inevitableeth
    6. blockquote
    7. repo
  • 📄 ./src/contribute/contributors.md:
    1. substancial
    2. Matías
    3. Aereal
    4. Aeón
    5. Fredrik
    6. Svantes
    7. Mehdi
    8. Zerouali
    9. Sebastián
    10. Fernández
  • 📄 ./src/awareness/social-engineering.md:
    1. otain
    2. Pretexting
    3. backdoors
  • 📄 ./src/awareness/security-training.md:
    1. introductionary
    2. targetting
    3. SMS
    4. authenticator
    5. strenghts
    6. SMS
  • 📄 ./src/awareness/staying-up-to-date.md:
    1. likelt
    2. Defi
    3. Stormcast
  • 📄 ./src/community-management/discord.md:
    1. Durations
    2. Integrations
    3. bot's
    4. MEE
    5. Dyno
    6. cooldown
    7. Uncheck
    8. Dyno
    9. Captcha
    10. captcha
    11. Dyno
    12. lockdown
    13. Integrations
    14. integrations
    15. analytics
  • 📄 ./src/community-management/README.md:
    1. practises
    2. SMS
    3. Yubikey
    4. Authy
    5. passcodes
  • 📄 ./src/community-management/google.md:
    1. SMS
    2. authenticator
    3. Authenticator
    4. OAuth
    5. OAuth
    6. influencer
  • 📄 ./src/community-management/twitter.md:
    1. particularily
    2. practises
    3. SMS
    4. authenticator
    5. TOTP
    6. Authy
    7. Authenticator
    8. Yubico
    9. timel
  • 📄 ./src/community-management/telegram.md:
    1. suc
    2. crypto
    3. practises
    4. EE
    5. blockchain
  • 📄 ./src/devsecops/security-testing.md:
    1. Devops
    2. SRE
    3. DevSecOps
    4. SAST
    5. DAST
    6. ombine
    7. SAST
    8. DAST
    9. IAST
  • 📄 ./src/devsecops/continuous-integration-continuous-deployment.md:
    1. Devops
    2. SRE
    3. practises
    4. misconfigurations
  • 📄 ./src/devsecops/README.md:
    1. DevSecOps
    2. Devops
    3. SRE
    4. devsecops
    5. devsecops
    6. devsecops
    7. Dvelopment
  • 📄 ./src/devsecops/repository-hardening.md:
    1. Devops
    2. consequenses
    3. practises
  • 📄 ./src/devsecops/code-signing.md:
    1. Devops
    2. GPG
    3. Yubikeys
    4. GPG
  • 📄 ./src/devsecops/integrated-development-environments.md:
    1. Devops
  • 📄 ./src/user-team-security/phishing-social-engineering.md:
    1. cryptocurrencies
    2. cryptocurrencies
    3. Crypto
    4. unecessary
    5. Unrekt
    6. Etherscan
  • 📄 ./src/user-team-security/security-training.md:
    1. trainign
    2. Wargames
  • 📄 ./src/governance/risk-management.md:
    1. NIST
    2. COBIT
    3. helop
  • 📄 ./src/governance/compliance-regulatory-requirements.md:
    1. Devops
    2. GDPR
    3. crypto
    4. GDPR
    5. HIPAA
    6. CCPA
    7. PCI
    8. DSS
    9. Anonymization
    10. Pseudonymization
    11. anonymization
    12. pseudonymization
    13. RBAC
    14. RBAC
    15. timeframes
    16. TLS
    17. VPN
    18. NIST
    19. NIST
    20. Cybersecurity
    21. cybersecurity
    22. IEC
    23. CIS
    24. CIS
    25. cybersecurity
    26. GDPR
    27. GDPR
    28. GDPR
    29. HIPAA
    30. HIPAA
    31. HIPAA
    32. PCI
    33. DSS
    34. PCI
    35. PCI
    36. DSS
    37. Cybersecurity
    38. CISA
    39. CISA
    40. cybersecurity
    41. CSA
    42. CSA
    43. IAPP
    44. IAPP
    45. whitepapers
    46. whitepapers
  • 📄 ./src/governance/security-metrics-kpis.md:
    1. MTTD
    2. MTTR
    3. timeframe
  • 📄 ./src/supply-chain/dependency-awareness.md:
    1. Snyk
    2. Dependabot
    3. Ethlint
    4. Snyk
    5. npm
  • 📄 ./src/supply-chain/README.md:
    1. Devops
    2. blockchain
  • 📄 ./src/supply-chain/supply-chain-levels-software-artifacts.md:
    1. Middleware
  • 📄 ./src/monitoring/guidelines.md:
    1. blockchain
    2. blockchain
    3. SMS
  • 📄 ./src/monitoring/README.md:
    1. blockchain
  • 📄 ./src/privacy/vpn-services.md:
    1. VPN
    2. VPN
    3. VPN
    4. VPN
    5. AES
    6. VPN
    7. DNS
    8. VPN
    9. MullvadVPN
    10. ProtonVPN
    11. NordVPN
    12. VPN
    13. CyberSec
    14. Surfshark
    15. ExpressVPN
    16. VPN
    17. VPN
    18. Fi
    19. Fi
    20. VPN
    21. Fi
    22. VPN
    23. VPN
    24. VPN
  • 📄 ./src/privacy/data-removal-services.md:
    1. Spokeo
    2. Whitepages
  • 📄 ./src/privacy/digital-footprint.md:
    1. Ghostery
    2. customizable
    3. Deseat
  • 📄 ./src/privacy/financial-privacy-services.md:
    1. cryptocurrency
    2. VPN
  • 📄 ./src/privacy/secure-browsing.md:
    1. HTTPS
    2. HTTPS
    3. HTTPS
    4. HTTPS
    5. HTTPS
    6. Fi
    7. Fi
    8. VPN
    9. Startpage
  • 📄 ./src/privacy/privacy-focused-operating-systems-tools.md:
    1. Qubes
    2. Whonix
    3. anonymize
    4. KeePass
  • 📄 ./src/privacy/README.md:
    1. Devops
  • 📄 ./src/privacy/encrypted-communication-tools.md:
    1. Threema
  • 📄 ./src/security-automation/infrastructure-as-code.md:
    1. Devops
    2. SRE
    3. misconfigurations
    4. Scalability
    5. scalable
    6. RBAC
    7. Checkov
    8. tfsec
    9. Terrascan
    10. Terraform
    11. Terraform
    12. tfsec
    13. Checkov
    14. Config
    15. Ansible
  • 📄 ./src/security-automation/compliance-checks.md:
    1. Devops
    2. SRE
    3. Config
    4. customizable
    5. HashiCorp
    6. Terraform
    7. HashiCorp
    8. OpenSCAP
    9. NIST
    10. CIS
  • 📄 ./src/security-automation/README.md:
    1. Devops
    2. SRE
  • 📄 ./src/security-automation/threat-detection-response.md:
    1. Devops
    2. SRE
    3. SIEM
    4. SIEM
    5. SIEM
    6. SIEM
    7. SIEM
  • 📄 ./src/operational-security/detecting-and-mitigating-insider-threats.md:
    1. Analytics
    2. RBAC
  • 📄 ./src/operational-security/password-secrets-management.md:
    1. cryptographic
    2. Yubikey
    3. authenticator
    4. Authy
    5. SMS
    6. SMS
    7. appropiate
    8. XKCD
    9. Qwertycards
    10. BIP
    11. crypto
    12. Shamir
    13. Shamir's
    14. recoverability
    15. Yubikeys
    16. SSO
    17. SSO
    18. KMS
    19. cryptographic
    20. KMS
    21. Biometric
  • 📄 ./src/operational-security/physical-security.md:
    1. cryptocurrency
    2. untrusted
    3. untrusted
    4. Fi
    5. VPN
    6. untrusted
    7. cryptographic
    8. cryptocurrency
    9. cybersecurity
  • 📄 ./src/operational-security/README.md:
    1. Devops
    2. SRE
    3. reputational
  • 📄 ./src/operational-security/g-suite-security.md:
    1. Devops
    2. Yubikeys
    3. SMS
    4. RBAC
    5. RBAC
    6. JIT
    7. DLP
    8. DLP
    9. DLP
    10. Workspace's
    11. MDM
    12. Workspace's
    13. MDM
    14. GDPR
  • 📄 ./src/operational-security/standard-operating-environment.md:
    1. Devops
    2. SRE
    3. SOE
    4. SOE
    5. RBAC
    6. Yubikeys
    7. VLANs
    8. WPA
    9. WPA
    10. AES
    11. Fi
  • 📄 ./src/operational-security/sim-swapping.md:
    1. SMS
    2. crypto
    3. SMS
    4. Authenticator
    5. Yubico
    6. Authy
    7. Gmail
    8. Crypto
    9. Coinbase
    10. Binance
    11. Squarespace
    12. Revolut
    13. Fi
    14. Fi
    15. MVNO
    16. Fi
    17. Fi
    18. Efani
    19. Efani
    20. MVNO
    21. Efani
    22. Efani
    23. SMS
  • 📄 ./src/operational-security/telegram.md:
    1. Passcode
    2. Passcode
    3. passcode
    4. Passcode
    5. passcode
  • 📄 ./src/operational-security/wireless-security.md:
    1. offfers
    2. WPA
    3. Fi
    4. WPA
    5. WPA
    6. AES
    7. SSID
    8. SSID
    9. VLANs
    10. WIDS
    11. VPN
    12. VPN
  • 📄 ./src/iam/secure-authentication.md:
    1. Devops
    2. SMS
    3. Yubikeys
    4. SSO
    5. SSO
    6. SSO
    7. Yubikeys
    8. SMS
  • 📄 ./src/iam/README.md:
    1. IAM
    2. IAM
    3. IAM
    4. RBAC
  • 📄 ./src/iam/access-management-best-practises.md:
    1. Devops
    2. JIT
    3. Onboarding
    4. Offboarding
    5. onboarding
    6. offboarding
    7. lifecycle
  • 📄 ./src/iam/role-based-access-control.md:
    1. RBAC
    2. Devops
    3. RBAC
    4. RBAC
    5. RBAC
  • 📄 ./src/vulnerability-disclosure/bug-bounties.md:
    1. incentivize
    2. bonuty
    3. Immunefi
    4. Hackenproof
    5. decrypt
    6. Bugcrowd
  • 📄 ./src/vulnerability-disclosure/README.md:
    1. Devops
  • 📄 ./src/vulnerability-disclosure/security-contact.md:
    1. txt
    2. txt
    3. txt
    4. txt
    5. Acknowledgement
  • 📄 ./src/external-security-reviews/security-policies-procedures.md:
    1. codebase
  • 📄 ./src/external-security-reviews/README.md:
    1. Devops
    2. offchain
    3. onchain
  • 📄 ./src/external-security-reviews/preparation.md:
    1. Devops
    2. mythril
    3. semgrep
    4. Golang
    5. golangci
    6. gosec
    7. gokart
    8. clippy
    9. TVL
  • 📄 ./src/encryption/communication-encryption.md:
    1. suppsedly
  • 📄 ./src/encryption/database-encryption.md:
    1. PII
    2. TDE
    3. decrypt
  • 📄 ./src/encryption/email-encryption.md:
    1. unencrypted
    2. Comodo
    3. Symantec
    4. GPG
    5. Enigmail
    6. Gmail
    7. GPG
    8. Enigmail
    9. ons
    10. Gmail
    11. GPG
    12. TLS
    13. TLS
    14. TLS
    15. GPG
    16. Mailvelope
    17. webmail
    18. Gmail
  • 📄 ./src/encryption/hardware-encryption.md:
    1. HSM
    2. HSM
    3. TPM
    4. TPM
    5. SEDs
  • 📄 ./src/encryption/README.md:
    1. Devops
  • 📄 ./src/encryption/encryption-in-transit.md:
    1. TLS
    2. SSL
  • 📄 ./src/encryption/partition-encryption.md:
    1. unencrypted
    2. LUKS
    3. LUKS
    4. AES
  • 📄 ./src/encryption/volume-encryption.md:
    1. unencrypted
    2. LUKS
    3. AES
  • 📄 ./src/encryption/cloud-data-encryption.md:
    1. Devops
    2. AES
    3. TLS
    4. KMS
    5. KMS
    6. BYOK
    7. KMS
    8. CSEK
    9. BYOK
    10. IAM
    11. IAM
    12. Config
    13. IAM
  • 📄 ./src/incident-management/seal-911-war-room-guidelines.md:
    1. pre
    2. UI
    3. frontend
    4. frontend
    5. Etherscan
    6. whitehat
    7. abcdef
    8. xabcdef
    9. xfedcba
    10. aaaabbbb
    11. xaaaabbbbccccdddd
    12. xddddeeeeffff
    13. CEX
    14. Phalcon
    15. xabcdef
    16. ETH
    17. aaaabbbb
    18. fedcba
    19. DAI
    20. CEX
    21. xaaaabbbbccccdddd
    22. abcdef
    23. BTC
    24. multisig
    25. xddddeeeeffff
    26. xfedcba
    27. USDC
    28. xabcdefabcdefabcd
    29. abcdef
    30. CEX
    31. xfedcba
    32. Mortem
    33. writeup
    34. writeup
    35. multisig
    36. frontend
    37. Phalcon
    38. Openchain
    39. repo
    40. gists
  • 📄 ./src/incident-management/communication-strategies.md:
    1. pre
  • 📄 ./src/incident-management/README.md:
    1. Devops
    2. SRE
  • 📄 ./src/incident-management/playbooks.md:
    1. devestating
  • 📄 ./src/incident-management/lessons-learned.md:
    1. Devops
    2. SRE
  • 📄 ./src/incident-management/incident-detection-and-response-mechanisms.md:
    1. onchain
    2. IRT
    3. IRT
    4. IRP
    5. IRP
  • 📄 ./src/secure-software-development/threat-modeling-secure-design-principles.md:
    1. Mitigations
    2. mitigations
  • 📄 ./src/secure-software-development/secure-code-repositories-version-control.md:
    1. Devops
    2. RBAC
    3. GPG
  • 📄 ./src/secure-software-development/README.md:
    1. Devops
    2. lifecycle
    3. SDLC
  • 📄 ./src/secure-software-development/code-reviews-peer-audits.md:
    1. SonarQube
    2. Checkmarx
    3. Snyk
  • 📄 ./README.md:
    1. vercel
    2. Vercel
    3. needeed
  • 📄 ./.github/ISSUE_TEMPLATE/update-request.md:
    1. assignees
  • 📄 ./.github/ISSUE_TEMPLATE/content-request.md:
    1. collab
    2. assignees
    3. xxxxxx
    4. yyyyy
    5. zzzzz

ℹ️ Here's how to fix them:

  • Fix typos: Open the relevant files and fix any identified typos.
  • Update wordlist: If a flagged word is actually a project-specific term add it to wordlist.txt in the project root.
    Each word should be listed on a separate line. Learn more.
  • 🚧 Remember:
    • When adding new words it MUST NOT have any spaces or special characters within or around it.
    • wordlist is NOT case sensitive.
    • Use backticks to quote code variables so as to not bloat the wordlist.

@mattaereal mattaereal requested a review from tebayoso September 30, 2024 19:20
tebayoso
tebayoso approved these changes Sep 30, 2024
View reviewed changes
Copy link
Collaborator

@tebayoso tebayoso left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

@mattaereal mattaereal merged commit f1368f4 into main Sep 30, 2024
3 of 4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@tebayoso tebayoso tebayoso approved these changes

Assignees

@mattaereal mattaereal

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@mattaereal @tebayoso