T

trivy

Production-style DevSecOps platform on AWS: STIG-hardened RKE2 Kubernetes on RHEL 9, built from code with Terraform, Ansible and Puppet. GitLab CI scan gates, Harbor, GitOps with Argo CD, Keycloak SSO and air-gapped delivery. One command builds it, one tears it down.

Toolchain image for the Coroboros security gates.

Self-hosted Kubernetes image vulnerability monitor for a fleet of clusters. Runs on its own VM outside every cluster it watches, reads each with a read-only credential, and assesses images either from an in-cluster agent or from their own registry. Trivy in isolated workers; never writes to a monitored cluster.

GitLab CI component for Trivy scanning

Trivy is the most popular open source security scanner

Gitlab CI/CD template that facilitates scan targets against security issues

GitLab CI pipeline with AI-powered code review using Claude and Gemini.

Centralised GitLab CI/CD templates designed to streamline automated workflows, quality checks, and multi-environment deployments.

Production-ready Docker image and CI pipeline for Wanderer Route Builder.

Production-ready Docker image and GitLab CI build pipeline for Wanderer.

Obraz Docker image trivy przeznaczony dla procesów CI/CD i devcontainers.

🗳️ Votely is a polling web app (React, FastAPI, PostgreSQL) built as a DevOps showcase: the application is the pretext, the delivery platform is the point.

✅ Tests from unit to end-to-end, a GitLab CI pipeline with security gates (gitleaks, Semgrep, Trivy, SBOM), build-once/promote releases, Helm charts for Kubernetes, AWS infrastructure with Terraform, keyless CI access through OIDC, images signed with Cosign and AWS KMS, k3s on EC2 with a disposable server and persistent data, HTTPS with cert-manager and Let's Encrypt, GitOps with Argo CD (staging on every merge, production on release tags, rollback by git revert, Sealed Secrets), observability with Prometheus and Grafana (API metrics, dashboard and alerts as code).

📖 Documented in English and French.

Production-minded Kubernetes platform with GitLab CI/CD, Docker, Helm, Prometheus, Grafana and Trivy security scanning.

Container Foundry is a project for building, scanning, publishing, signing, and attesting custom OCI container images.

Python QA automation cookbook with reusable recipes for API testing, pytest patterns, CI/CD pipelines, Dockerized execution, Allure reporting, quality gates, and security scanning.

The purpose of this project is to improve pipeline performance when scanning for vulnerabilities in containers by providing a prebuilt Docker container where the vulnerability database is already downloaded

CI/CD pipeline and container configuration for the Tetris App. Jenkins builds, scans, versions, and pushes the image on every commit. ArgoCD picks up the change and triggers a canary rollout on EKS.

Jenkins Shared Library. Reusable Trivy scanning and email reporting functions for the Tetris App CI/CD pipeline.

Jenkins pipeline that runs Trivy vulnerability scans on a Maven Java application before allowing code to proceed to staging. Generates a CSV report, prompts the developer to proceed or abort on findings, and emails the report if the pipeline is stopped.