Local observability stack: Keycloak + Postgres + Prometheus + Grafana with OAuth/OIDC authentication for Grafana via Keycloak. Suitable as a reference for verifying Keycloak metrics and exercising the OAuth flow.

DevSecOps Project using git, GitHub, jenkins, Maven,Junit, SonarQube, Docker, Trivy, Hashicorp Vault, AWS, Kubernetes

🎨 Java library template • Gradle Kotlin DSL • GitHub Actions CI/CD to build, release & publish to Maven Central • Renovate • Trivy • Javadoc (Pages) • Issue & PR Templates

This is a Maven plugin developed to simplify the process of scanning Docker images for vulnerabilities using Trivy.

💬 Real-time chat app built with Flask & Socket.IO, deployed on AWS EC2 with automated CI/CD using GitHub Actions.

Quarantine pipeline for container image auto-updates. Stages new images from upstream repositories into a local one, holds them for a configurable cooling-off period, scans for vulnerabilities, and promotes to production only after the quarantine expires and security scans come back clean. Or if you force the release. But that's on you then!

An Azure Pipelines Task for trivy

QR-based ticket booking system using Next.js 14, MongoDB, Razorpay, and NextAuth v5. It provides a secure platform for online ticket booking with integrated payment processing via Razorpay and user authentication with NextAuth v5. The system also includes real-time QR code validation and FlapGates(door) access control using Raspberry PI-4B.

I will use GitHub Actions to deploy our VueJS project on Google Kubernetes Engine (GKE).

A Trivy plugin that enhances vulnerability scan results with EPSS data

Kubernetes Custom Controller + Admission Webhook for CVE Scan (In Progress)

AI-assisted compliance reasoning engine. An open-source, vendor-agnostic CLI tool to detect AI-generated code slop, security issues, and quality problems in PRs and CI pipelines.

Deploy a Netflix clone application using a secure CI/CD pipeline built with Jenkins, Docker 🐳 , and Kubernetes ☸️. This project includes implementing code quality and security tools (SonarQube, Trivy), as well as monitoring solutions (Prometheus, Grafana) to ensure reliability and visibility

A ready-to-use CI/CD Pipeline for scanning vulnerabilities using Trivy.

A comprehensive API designed to manage and track personal finances. It is built with Node.js, Express, MongoDB, Redis & Docker..

Security scan on Docker images using Grype, Trivy and Docker-Scout (.xlsx)

Docker image Security with Trivy and Falco

This project demonstrates how to containerize a FastAPI application using Docker, then progressively harden the container image and secure the CI/CD pipeline using real-world DevSecOps practices.

Sentinel Dock is a comprehensive container security toolkit designed to safeguard Docker environments. It seamlessly integrates Trivy for vulnerability scanning and offers real-time monitoring of container activity. Key features include resource usage tracking (CPU & memory), and configuration hardening to enhance security and resilience.