D

devsecops

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

This GitLab CI/CD pipeline implements a complete DevSecOps and GitOps workflow for a containerized application. It performs Dockerfile linting, builds and pushes images with Kaniko, runs Gitleaks and Trivy security scans, generates a CycloneDX SBOM, updates Kubernetes manifests through GitOps, performs DAST using OWASP ZAP and Nuclei, and generates a unified HTML security report with all scan results.

Always-on GitLab repo custodian: an autonomous AI teammate (4 personas) that reviews merge requests, sweeps merged code for regressions, files issues, and drafts fix MRs — tuning itself to your team's standards from your reactions. Built on Vertex AI Gemini + GitLab MCP for the Google Cloud Rapid Agent Hackathon 2026 (GitLab Track).

Cheatsheet / IT toolbox

🛡️ K-Guard: Kubernetes Security Automation & Remediation (PoC)

K-Guard is a DevSecOps proof-of-concept focused on automating vulnerability lifecycle and active defense workflows within K3s clusters.

Vulnerability Remediation: Automated image patching workflows using K8s API patches triggered by Trivy scan results. Network Segregation: Policy-as-Code implementation (Ansible) for Ingress hardening and CIDR-based access control. SecOps Alerting: Real-time incident notification system leveraging Cisco Webex API for rapid response. Self-Healing Exploration: Detecting configuration drifts and applying automated state recovery.

🛡️ K-Guard : Pilotage de la Sécurité & Automatisation Kubernetes (MVP)

K-Guard est un outil d'expérimentation DevSecOps conçu pour automatiser les workflows de détection et de remédiation sur clusters K3s. Il explore l'implémentation de la défense active via l'API Kubernetes.

Points Techniques Clés

Vulnerability Management : Pipeline de scan continu (Trivy) avec déclenchement de correctifs via Strategic Merge Patch sur les Deployments. Hardening Réseau : Automatisation de Network Policies (Ansible) pour l'isolation des flux Ingress (filtrage IPs Cloudflare / RFC 1918). Incident Response (IR) : Système d'alerte ChatOps via l'API Cisco Webex pour la notification en temps réel des failles critiques détectées. Infrastructure-as-Code : Logique de remédiation et de déploiement orchestrée via GitLab CI/CD et scripts d'automation (Python/Go).

This platform is designed to simplify the resignation process by providing a structured and professional way to craft resignation letters.

The purpose of this POC is to perform a comprehensive proof of concept of the entire process, from development to deployment.

This platform takes a satirical approach to the HR system, offering a humorous yet insightful perspective on navigating salary negotiations and understanding the intricacies of workplace compensation.

LinkSphere is a modern URL shortener built with Go and React. It provides fast link generation, click tracking, and a clean dashboard for managing and analyzing shortened URLs.

AI DevSecOps Serverless Scanners.