D

devsecops

The landing page and the ten scenarios. The thesis, the claims ledger, and the public posture mirror an assessor can check without an account.

Chapter 3: the driver. One tool provisions the group, assesses each control, pushes verdicts, and exports OSCAL.

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

Renders the Evidence Factory group README and its ten scenarios as one site. This project holds no prose; edit gitlab-profile.

Auditoria de hardening de imagens Docker: orquestra hadolint, trivy e dockle, normaliza a saida numa politica unica de 14 propriedades e preenche as lacunas medidas

Current version: v1 www.appsecforge.com

Always-on GitLab repo custodian: an autonomous AI teammate (4 personas) that reviews merge requests, sweeps merged code for regressions, files issues, and drafts fix MRs — tuning itself to your team's standards from your reactions. Built on Vertex AI Gemini + GitLab MCP for the Google Cloud Rapid Agent Hackathon 2026 (GitLab Track).

Cheatsheet / IT toolbox

AI-powered security orchestration for GitLab CI/CD. Automated vulnerability patching, threat modeling, and compliance scoring with GPT-4 and Claude AI agents.

Static security scanner for MCP and AI-agent configurations ? secrets, excessive permissions, unsafe shells and supply-chain risk.

D3FENDer is a security assessment and gap detection tool developed by Michael Favvas for his thesis titled "Development of a security assessment and gap detection system using the MITRE ATT&CK and D3FEND Frameworks". It uses a rule based system to grade an organization's defenses based on the input. It then detects possible gaps and suggests mitigations based on the MITRE ATT&CK and D3FEND Knowledge Bases. The tool can be used in SOC work flows.

AI-powered incident classification for ITSM environments. Python, FastAPI, Claude API, ChromaDB, BM25. Full CI/CD pipeline with SAST and dependency scanning.

Setup Static Application Secret Testing (SAST) in GitLab CI pipeline using NJSScan and Semgrep.

About FreePlayground is my public engineering lab notebook and proof-of-work repo. It captures weekly progress across DevOps fundamentals, cloud, automation, and security, plus the projects and experiments I build along the way.

An AI-powered Security Agent built for the GitLab Duo Agent Challenge. Security Guardian automates vulnerability detection and provides suggested fixes directly in the SDLC.

This basic note-taking application is used to showcase the different GitLab features around security and governance. To get started checkout the Full Tutorial Documentation.