C

container-security

Fail-closed VEX disposition engine for Iron Bank container findings. Joins findings against public sources (Red Hat CSAF, GitLab CNA, OSV) and emits cited triage worksheets, OpenVEX, and CycloneDX 1.7 VDR.

Auditoria de hardening de imagens Docker: orquestra hadolint, trivy e dockle, normaliza a saida numa politica unica de 14 propriedades e preenche as lacunas medidas

Current version: v1 www.appsecforge.com

Gitlab CI/CD template that facilitates scan targets against security issues

Kubernetes-native Helm auditor for supply chain security, aggregating SBOM, vulnerability, and provenance data.

A GitLab CI/CD pipeline that builds a hardened UBI9‑STIG Apache container, injects application content, and deploys the image to a local OpenShift cluster.

This project serves as a comprehensive reference implementation for enterprise DevSecOps practices, demonstrating how security, automation, and observability integrate seamlessly in modern cloud applications.