D

devsecops

This Git repository serves as a valuable resource for centralizing Kubernetes manifests and automating GitOps workflows using Argo CD.

The purpose of this POC is to perform a comprehensive proof of concept of the entire process, from development to deployment.

This basic note-taking application is used to showcase the different GitLab features around security and governance. To get started checkout the Full Tutorial Documentation.

This Git repository serves as a valuable resource for managing Dockerfiles and associated scripts.

This project provides a comprehensive infrastructure-as-code solution using Ansible.

This project focuses on an automated certificate generation service powered by Ansible playbooks.

Organisation for #everyonecancontribute cafe sessions (ideas & tasks)

To fail a pipeline if any raw secrets are found in the code. It uses the GitGuardian API to scan for secrets.

Security pipelines

Simple Notes Application deployed to AWS EKS cluster.

This project leverages GitLab's DevOps platform to demonstrate the seamless integration of development, security, and operations in deploying a cloud-native application. It highlights GitLab CI/CD pipelines and security scanning, showcasing a streamlined, secure software delivery process.

Talk resources, demos, prompts

Shiftleft CLI auto builder for Docker Hub

GitLab Duo Coffee Chat, hosted by @dnsmichi Guest: Michael Aigner, @tonka3000

Hosted by @dnsmichi, guest: @mzille-ext

Scans selected files for patterns stated in rules. This is used in order to find secrets you may have accidentally written to a file. This scanner is used to show how the GitLab vulnerability report can be populated by a custom scanner. You can see a demo of it in action be following the documentation in the Secret List project.

Basic note-taking application used to learn how to implement DevSecOps with GitLab. Be sure to start by reading the docs!

Runs a vulnerability scan using OpalOPC against a target server and creates an HTML and a SARIF report for the scan on completion.

AI DevSecOps Serverless Scanners.