security-pipeline

Faraday's Command Line Interface

Fortify Jenkins plugin

coreSigma is a macOS ESF & UL telemetry pipeline, detection, and threat hunting app for security analysis, using Sigma and Sigma backend for rule creation and translation.

AegisFlow is a threat-aware CI/CD pipeline that integrates real-time threat intelligence (AlienVault OTX), MITRE ATT&CK-based static analysis, and SBOM-driven CVE detection to automate secure software delivery.

Automated AWS Honeypot implementation

Automated security scanning pipeline for my portfolio site. Semgrep (SAST), OWASP ZAP (DAST), and Snyk (SCA) wired into GitHub Actions with self-gating workflows and auto-created remediation issues.

An automated container hardening and security pipeline featuring Trivy vulnerability scanning (SCA) integrated into GitHub Actions.

This project provides examples, scripts, and best practices for integrating Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) into modern CI/CD pipelines. The goal is to catch vulnerabilities early, automate remediation feedback, and ensure secure delivery without slowing down development.

End-to-end DevSecOps CI/CD pipeline integrating SAST, SCA, Secrets Scanning, Container Security, and DAST with automated security gates and deployment blocking using GitHub Actions.

Orchestrate idea-to-delivery flows with multi-agent CLI planning, reviews, and task execution in one workspace

A DevSecOps security pipeline for PayliteNG using GitHub Actions, TruffleHog, Bandit, Safety, Trivy and Checkov to detect secrets, code vulnerabilities, dependency CVEs, container vulnerabilities and IaC misconfigurations.

DevSecOps security pipeline lab demonstrating AppSec CI/CD controls with CodeQL, Semgrep, Gitleaks, Trivy, OWASP ZAP, Dependabot, and OSSF Scorecard

Repository untuk tugas DevSecOps Week6 — Software Composition Analysis (SCA)

OSDO Reusable Workflows — 10 composable security workflows for GitHub Actions. SAST, SCA, secrets, containers, IaC, DAST, compliance, and more.

Production-ready DevSecOps pipeline — SAST, secrets, dependencies, container, DAST, signing & SBOM. Drop-in security for any CI/CD.

Fullstack LLM-supported application that stores encrypted messages online; implements Redis-based distributed task scheduling. SpringBoot + React/Vite + PostgreSQL database; fully custom-rolled encryption algorithms (PBKDF2, SHA-256, AES-256-GCM) without cryptography libraries.

CI/CD automated security pipeline incorporating SAST, dependency audits, IaC checks, and policy enforcement.

DevSecOps security pipeline with GitLab CI/CD, Semgrep, Gitleaks, npm audit, Docker, and Trivy.

GitHub Actions pipeline that detects, gates, and audits AI-generated code — policy checks, security scans (Gitleaks + Semgrep), sandboxed tests, and risk-scored reviews