Description

Executive summary: An actionable, language-specific security kit that turns OWASP priorities into daily habits: patterns, anti-patterns, SAST/DAST configs, and threat-model stencils.

What’s inside (modules):
– Secure Patterns per Language: validation, encoding, least-privilege, safe crypto, secrets handling.
– SAST/DAST Configs: Semgrep rulesets, CodeQL queries, OWASP ZAP baseline scans.
– Threat Modeling: STRIDE templates, misuse cases, risk scoring sheets; architecture review checklists.
– Secrets Governance: pre-commit scanners, rotation runbooks, sealed-secrets reference for K8s.
– Training Aids: annotated vulns with fixes.

Technical specifications:
– Artifacts: .md guides, .yml CI configs, Semgrep/CodeQL rules, .drawio diagrams.
– Coverage: OWASP Top 10, SSRF, insecure deserialization, CSRF, path traversal, SQLi, RCE patterns.

Setup & integration:
– Drop rules into CI; enable baseline scans on PRs; run monthly threat-model review.

KPIs & ROI:
– 20–40% fewer high-severity findings within 2 sprints; faster triage due to standardized annotations.

Included files:
/semgrep/*.yml, /codeql/*.ql, /zap/*.yml, /threat-models/*.drawio, /docs/*