The cep-backend project is a comprehensive solution for managing zip codes using cutting-edge technologies and modern development practices. Built primarily with Node.js and JavaScript, this project leverages various tools and platforms such as Docker, npm, MongoDB, Google Cloud Platform (GCP), SonarQube, Snyk, DevSecOps and Terraform.

Verify your app was signed correctly. The service also verifies that the app wasn’t tampered with in any way that may prevent it from running on any mobile device

Jenkins Pipeline, Java based application using Kubernetes, Maven, SonarQube, Docker, Trivy.

Projects, notes and tutorials built to enhance knowledge on DevSecOps, with diagrams on cloud architecture

Tolani's Virtual Portfolio

chaostoolkit githubactions chaos engineering

A code repository designed to show the best GitHub has to offer.

Bu repo, hastane personelinin hasta bilgilerini güvenli şekilde kaydedebileceği, Docker ile kurulabilen ve MySQL kullanan bir web uygulamasını içerir. SQLi ve CSRF gibi güvenlik açıklarına karşı korunmuştur.

Scan your IAM policies before they hit prod. secure-iam-lint catches common misconfigurations with a simple CLI or CI step

Secure multi-cloud CI/CD with GitHub Actions — automated linting, testing, security scans, signing and deployments to AWS EKS & Azure AKS.

A secure, automated DevSecOps pipeline for deploying a website on AWS, featuring Jenkins CI/CD, SonarQube quality checks, and container security with Trivy and Docker Scout.

# 🛡️ SecSecDevOps Automation Scripts

Production-ready automated container image vulnerability scanning system using AWS ECR, Inspector v2, Lambda, and EventBridge

eBPF-based monitor for detecting suspicious activity during Docker image builds

Tips & Tricks on Binary Exploitation & Reverse Engineering

A fast, automated security auditing dashboard that aggregates daily scans from all your projects. PhantomScanner collects results from Semgrep, Bandit, Trivy, and Gitleaks, normalizes them into a unified schema, stores them in a SQLite/Postgres backend, and visualizes them through a simple, responsive dashboard. Designed to scan many repos for free

CLI em Go que orquestra scanners como Trivy, Semgrep e OWASP Dependency-Check para consolidar análises de segurança e relatórios.

A comprehensive DevSecOps pipeline for the Sheba platform, integrating security into every phase of the development lifecycle. This repository contains infrastructure as code, CI/CD pipelines, and security automation for secure cloud-native deployments.

Repository contains Node.js code using Express library to make Backend app for DevOps flow demo.

Java SonarQube Integration