Jenkins CI (dynamic K8s agents) → signed, SBOM'd supply chain (Syft + Cosign/Sigstore) → enforced at admission by Kyverno, watched at runtime by Falco, backed up by Velero. Local-first on kind.
KubeDock Security Scan is an Azure DevOps Extensions for CI/CD pipeline that helps to scan and provide feedback for vulnerability in kubernetes manifest and dockerfile via Checkov
Secure static website hosting on AWS using Terraform with S3, CloudFront, Route53, and SSL.
Deploy a Node.js to-do application to AWS Elastic Beanstalk using Terraform for infrastructure provisioning, GitHub Actions for CI/CD automation, with integrated cost estimation via Infracost and security scanning through Checkov.
Terraform module to create Sql managed instance resources . Azure SQL Managed Instance is a Platform-as-a-Service (PaaS) offering that provides near 100% compatibility with the SQL Server Enterprise Edition, designed for easy "lift-and-shift" migration of on-premises SQL Server apps to the cloud with minimal changes.
Modular Application Security Posture Management (ASPM) pipeline featuring AST-based SAST, OSV-API SCA, Checkov IaC scanning, and LLM-driven remediation (Qwen/GPT-OSS). Engineered for my MSc IT with Cybersecurity dissertation at the University of Aberdeen.
🏗️ A centralized repository for reusable custom Checkov policies, metadata-driven service-to-scan mappings, Terraform module detection logic, pass/fail test cases, and GitHub Actions automation. It enables consistent, scalable, and organization-wide IaC governance across Terraform repositories and cloud services.
To associate your repository with the checkov-scan topic, visit your repo's landing page and select "manage topics."