security-gate

Simple and pratical security gate for Github Security Alerts

Auto-permission engine for Antigravity CLI (agy): deterministic AST parser + LLM classifier

Security-Goat is a command line client to perform Security Gate written in Go. It interacts with DependaBot alerts using GitHub GraphQL API.

Mantis is a template-driven DAST and application validation engine for CI/CD pipelines - smoke tests, passive/active scanning, OpenAPI-driven API checks and an environment-aware security gate, in one deterministic tool.

Pipeline CI/CD DevSecOps con Jenkins, Trivy, OWASP ZAP y Security Gate

Simple Prompt Injection and Policy Enforcement Pipeline for LLM

Docker Build & Trivy Vulnerability Scanning Pipeline

DevSecOps CI/CD pipeline utilizing GitHub Actions to implement automated security gates and continuous security scanning for application workflows.

Self-building hardened RHEL 9 lab — CIS/STIG remediation as code, measured before/after

Security scan orchestrator and merge gate for CI. Runs Semgrep, Gitleaks and Trivy, merges results into SARIF, reports to your tracker and fails the pipeline only on new findings.

Read-only local security gate & scanner for AI coding workflows, MCP, and package hallucination risks.

Attribute code to AI or human commits via git blame and gate on SAST finding density in AI-written code

Security findings are generated by industry-standard scanners (Bandit, pip-audit, Gitleaks) and enforced via a custom Python policy-as-code gate, with optional AI-assisted remediation summaries.

🛡️ Zero-trust security gate & vulnerability scanner for AI agent skills (Claude Code, Antigravity, OpenCode, Codex). Powered by NVIDIA SkillSpector.

Jev tool suite: verbatim context compaction, prompt enhancement, QA scan, semantic file search. One-command install for Claude Code, OpenCode, Codex, Hermes.

Hands-on DevSecOps demo: a hardened, multi-stage Docker build for a Flask app with a Trivy CI security gate, SBOM generation (Syft), Docker Scout scanning, digest-pinned base images, and documented CVE exceptions. Build fails on HIGH/CRITICAL vulns.

IaC security gate — pre-commit + CI blocking secrets and misconfig before merge

Certify AI agents are safe for your internal web app before granting production access. CLI + MCP server, npm/PyPI.

Cross-border marketplace connecting Latin American artisans with customers worldwide. Monorepo powered by NestJS, React, Supabase, n8n, Docker, and GitHub Actions.