C

container-security

Gitlab CI/CD template that facilitates scan targets against security issues

Fail-closed VEX disposition engine for Iron Bank container findings. Joins findings against public sources (Red Hat CSAF, GitLab CNA, OSV) and emits cited triage worksheets, OpenVEX, and CycloneDX 1.7 VDR.

Scan Docker images and containers for known CVEs from the command line. Open source, auditable, privacy-first — powered by the ValtersIT CVE API.

Hands-on cybersecurity portfolio demonstrating SOC automation, Sigma/KQL detection engineering, incident-response playbooks, GitLab CI/CD security gates, supply-chain security, container hardening, and IaC scanning using controlled synthetic laboratory evidence.

Auditoria de hardening de imagens Docker: orquestra hadolint, trivy e dockle, normaliza a saida numa politica unica de 14 propriedades e preenche as lacunas medidas

Current version: v1 www.appsecforge.com

Kubernetes-native Helm auditor for supply chain security, aggregating SBOM, vulnerability, and provenance data.

A GitLab CI/CD pipeline that builds a hardened UBI9‑STIG Apache container, injects application content, and deploys the image to a local OpenShift cluster.

This project serves as a comprehensive reference implementation for enterprise DevSecOps practices, demonstrating how security, automation, and observability integrate seamlessly in modern cloud applications.