secure-pipeline

DevSecOps Playground: a working comparison of an insecure and secure CI/CD pipeline running the same app. The insecure pipeline ships a SQL injection and hardcoded secret straight to production; the secure pipeline catches both with Semgrep, Trivy, CodeQL, and Cosign before deploy.

Secure CI/CD pipeline with SBOM, vulnerability scanning, and signed containers using GitHub Actions

Cross-platform AEAD hybrid encryption plugin — combining AES-GCM and ChaCha20-Poly1305 for deterministic, reproducible, and authenticated data protection across systems and pipelines.

A Kubernetes and Vault-based end-to-end secure pipeline with a sample Flask application.

A secure data engineering pipeline implemented in Python using the Titanic dataset. It demonstrates best practices for handling sensitive information (PII) by applying AES-128 encryption (Fernet) before storage in a SQLite database, ensuring data privacy while maintaining analytical capabilities through secure decryption methods.

A 100% offline, zero-data-leakage pipeline that securely transforms enterprise PDFs into ShareGPT datasets using local LLMs via Ollama. Features self-healing JSON, async processing, and LLM-as-a-judge hallucination defense.

Fully automated GCP pipeline: Python → GCS → Cloud Data Fusion (salary masking + SHA-256 password hashing) → BigQuery → Tableau | Daily Airflow orchestration