trivy

The purpose of this project is to improve pipeline performance when scanning for vulnerabilities in containers by providing a prebuilt Docker container where the vulnerability database is already downloaded

Implemented Jenkins for automated code checkout, Maven builds, and test execution. Integrated SonarQube for code quality analysis and configured Docker for consistent container deployments, with Trivy used for vulnerability scanning.

Automate docker images analysis by Trivy and manage related Gitlab issues

DevSecOps Pipeline

Examples of gitlab-ci jobs, pytest slack integration, pylint-check jobs, gitlab-artifacts, parametrization-tests, multithread using inside test, sitemap checking links status. Mirrored to github https://github.com/aleksandr-kotlyar/python_and_gitlab

Use for a demonstration of GitLab CI/CD/Security Dashboard integration with Trivy: https://gitlab.com/aquasecurity/trivy-ci-test

Test aquasecurity/trivy on GitLab CI (https://github.com/aquasecurity/trivy)