Local observability stack: Keycloak + Postgres + Prometheus + Grafana with OAuth/OIDC authentication for Grafana via Keycloak. Suitable as a reference for verifying Keycloak metrics and exercising the OAuth flow.
DevSecOps Project using git, GitHub, jenkins, Maven,Junit, SonarQube, Docker, Trivy, Hashicorp Vault, AWS, Kubernetes
🎨 Java library template • Gradle Kotlin DSL • GitHub Actions CI/CD to build, release & publish to Maven Central • Renovate • Trivy • Javadoc (Pages) • Issue & PR Templates
This is a Maven plugin developed to simplify the process of scanning Docker images for vulnerabilities using Trivy.
Enterprise-ready Docker Registry UI with built-in Trivy scanning, multi-registry management, bulk retention policies, repository analytics, and secure image lifecycle operations.
Quarantine pipeline for container image auto-updates. Stages new images from upstream repositories into a local one, holds them for a configurable cooling-off period, scans for vulnerabilities, and promotes to production only after the quarantine expires and security scans come back clean. Or if you force the release. But that's on you then!
💬 Real-time chat app built with Flask & Socket.IO, deployed on AWS EC2 with automated CI/CD using GitHub Actions.
A Trivy plugin that enhances vulnerability scan results with EPSS data
AI-assisted compliance reasoning engine. An open-source, vendor-agnostic CLI tool to detect AI-generated code slop, security issues, and quality problems in PRs and CI pipelines.
QR-based ticket booking system using Next.js 14, MongoDB, Razorpay, and NextAuth v5. It provides a secure platform for online ticket booking with integrated payment processing via Razorpay and user authentication with NextAuth v5. The system also includes real-time QR code validation and FlapGates(door) access control using Raspberry PI-4B.
An Azure Pipelines Task for trivy
I will use GitHub Actions to deploy our VueJS project on Google Kubernetes Engine (GKE).
Kubernetes Custom Controller + Admission Webhook for CVE Scan (In Progress)
A ready-to-use CI/CD Pipeline for scanning vulnerabilities using Trivy.
Deploy a Netflix clone application using a secure CI/CD pipeline built with Jenkins, Docker 🐳 , and Kubernetes ☸️. This project includes implementing code quality and security tools (SonarQube, Trivy), as well as monitoring solutions (Prometheus, Grafana) to ensure reliability and visibility
Security scan on Docker images using Grype, Trivy and Docker-Scout (.xlsx)
Capstone Project for DEPI we deployed NodeJS -NestJs - ReactJS application in form of containers and then orchestrate these containers using K8S as dynamic agent inside the cluster and used Argocd to continuous Deployment , and for the monitoring we used prometheus and graffana
Projeto Prático Programa Intensivo em Containers e Kubernetes - Desenvolvimento e Otimização Segura de Aplicações Kubernetes
To associate your repository with the trivy-scan topic, visit your repo's landing page and select "manage topics."