https://github.com/ajinabraham/nodejsscan

https://pypi.org/project/bandit/

https://owasp.org/www-project-docker-top-10/

The OWASP Docker Top 10 project is giving you ten bullet points to plan and implement a secure docker-based container environment.

https://owasp.org/www-project-api-security/

API Security focuses on strategies and solutions to understand and mitigate the unique vulnerabilities and security risks of Application Programming Interfaces (APIs).

https://owasp.org/www-project-top-ten/

The OWASP Top 10 is a standard awareness document for developers and web application security. It represents a broad consensus about the most critical security risks to web applications.

https://cheatsheetseries.owasp.org/

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

https://threagile.io/

Threagile enables teams to execute Agile Threat Modeling as seamless as possible, even highly-integrated into DevSecOps environments.

https://github.com/aquasecurity/kube-bench

kube-bench is a tool that checks whether Kubernetes is deployed securely by running the checks documented in the CIS Kubernetes Benchmark.

Tests are configured with YAML files, making this tool easy to update as test specifications evolve.

https://github.com/docker/docker-bench-security

The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production. The tests are all automated, and are based on the CIS Docker Benchmark v1.6.0.

We are making this available as an open-source utility so the Docker community can have an easy way to self-assess their hosts and Docker containers against this benchmark.

https://www.cisecurity.org/controls/cis-controls-list