Purpose: A practical, repo-ready checklist that mirrors the DevSecOps pipeline stages and their gates. Use it as your team’s working agreement.
✅ Tip: Copy this file as DEVSECOPS_CHECKLIST.md in your repo. Create the PR template below at .github/pull_request_template.md.
| <!DOCTYPE html> | |
| <html lang="en"> | |
| <head> | |
| <meta charset="UTF-8" /> | |
| <meta name="viewport" content="width=device-width, initial-scale=1.0" /> | |
| <title>Hague Group - Template Letters</title> | |
| <style> | |
| body { | |
| font-family: "Segoe UI", Tahoma, Geneva, Verdana, sans-serif; | |
| line-height: 1.6; |
| from datetime import datetime, timedelta | |
| import time | |
| from google.oauth2.service_account import Credentials | |
| from googleapiclient.discovery import build | |
| import os | |
| import json | |
| from tenacity import RetryError, retry, stop_after_attempt, wait_fixed | |
| # YouTube Data API setup | |
| API_KEY = '' # put API key here |
| #!/bin/bash | |
| # List of top 100 domains | |
| domains=( | |
| "google.com" | |
| "youtube.com" | |
| "facebook.com" | |
| "baidu.com" | |
| "wikipedia.org" | |
| "yahoo.com" |
| !/bin/bash | |
| echo "Flushing DNS cache, please give sudo password..." | |
| sudo dscacheutil -flushcache; sudo killall -HUP mDNSResponder | |
| # Capture DNS traffic | |
| echo "Capturing DNS traffic..." | |
| sudo tcpdump -i any -s 0 -w dns_traffic.pcap port 53 & | |
| TCPDUMP_PID=$! |
| #!/bin/bash | |
| set -e | |
| set -x | |
| DISK=$1 | |
| VG=$2 | |
| VOL=$3 | |
| MOUNTPOINT=$4 | |
| SIZE=${5:-"100%FREE"} | |
| # Wait for x disks to be available |
| Edit the daemon configuration file: | |
| ``` | |
| $ vim /etc/docker/daemon.json | |
| ``` | |
| Add the following lines to file: | |
| ``` | |
| { |
| iptables -P INPUT ACCEPT | |
| iptables -P FORWARD ACCEPT | |
| iptables -P OUTPUT ACCEPT | |
| iptables -t nat -F | |
| iptables -t mangle -F | |
| iptables -F | |
| iptables -X |
| source fixproxy.sh | |
| cat <<EOF > /etc/yum.repos.d/kubernetes.repo | |
| [kubernetes] | |
| name=Kubernetes | |
| baseurl=https://packages.cloud.google.com/yum/repos/kubernetes-el7-x86_64 | |
| enabled=1 | |
| gpgcheck=1 | |
| repo_gpgcheck=1 |
| export http_proxy=http://proxy.intra.bt.com:8080/ | |
| export HTTP_PROXY=$http_proxy | |
| export https_proxy=$http_proxy | |
| export HTTPS_PROXY=$http_proxy | |
| export HOST_IP=`hostname -i` | |
| printf -v pool '%s,' 192.168.0.{1..253} | |
| printf -v service '%s,' 10.96.0.{1..253} | |
| export no_proxy="127.0.0.1,localhost,${HOST_IP,},${service%,},${pool%,},127.0.0.1"; | |
| export NO_PROXY=$no_proxy |