D

devsecops

Chapter 5: a container image at cutover phase. The unsigned-image gap is planted, and the red pipeline is the point: watch the floor block it.

DevSecOps health check for GitLab Self-Managed instances.

Auditoria de hardening de imagens Docker: orquestra hadolint, trivy e dockle, normaliza a saida numa politica unica de 14 propriedades e preenche as lacunas medidas

Toolchain image for the Coroboros security gates.

This GitLab CI/CD pipeline implements a complete DevSecOps and GitOps workflow for a containerized application. It performs Dockerfile linting, builds and pushes images with Kaniko, runs Gitleaks and Trivy security scans, generates a CycloneDX SBOM, updates Kubernetes manifests through GitOps, performs DAST using OWASP ZAP and Nuclei, and generates a unified HTML security report with all scan results.

D3FENDer is a security assessment and gap detection tool developed by Michael Favvas for his thesis titled "Development of a security assessment and gap detection system using the MITRE ATT&CK and D3FEND Frameworks". It uses a rule based system to grade an organization's defenses based on the input. It then detects possible gaps and suggests mitigations based on the MITRE ATT&CK and D3FEND Knowledge Bases. The tool can be used in SOC work flows.

This Git repository serves as a valuable resource for managing Dockerfiles and associated scripts.

AI-powered incident classification for ITSM environments. Python, FastAPI, Claude API, ChromaDB, BM25. Full CI/CD pipeline with SAST and dependency scanning.

Kubernetes-native Helm auditor for supply chain security, aggregating SBOM, vulnerability, and provenance data.

About FreePlayground is my public engineering lab notebook and proof-of-work repo. It captures weekly progress across DevOps fundamentals, cloud, automation, and security, plus the projects and experiments I build along the way.

Cloud-native DevOps portfolio project with Docker, Kubernetes, GitLab CI/CD, Terraform, AWS and Trivy.

An AI-powered Security Agent built for the GitLab Duo Agent Challenge. Security Guardian automates vulnerability detection and provides suggested fixes directly in the SDLC.

This POC evaluates the HUGO static site generator framework for potential adoption in our infrastructure documentation projects.

This platform is designed to simplify the resignation process by providing a structured and professional way to craft resignation letters.

The purpose of this POC is to perform a comprehensive proof of concept of the entire process, from development to deployment.

This platform takes a satirical approach to the HR system, offering a humorous yet insightful perspective on navigating salary negotiations and understanding the intricacies of workplace compensation.

A comprehensive mortgage calculator application written in Rust with a GUI. This tool helps you calculate monthly mortgage payments including principal, interest, property taxes, insurance, PMI, and HOA fees.

Used to showcase GitLab support for Rust.