Skip to content

truongng201/SafeDeploy-CI-CD-Security-Automation

Repository files navigation

SafeDeploy-CI-CD-Security-Automation

SafeDeploy is a DevSecOps CI/CD pipeline that integrates security at every stage—featuring automated static analysis (SAST), dependency scanning (SCA), container image scanning, and dynamic testing (DAST)—to detect and mitigate vulnerabilities before deployment.

Features

  • SAST: Static code analysis to identify vulnerabilities in source code.
  • SCA: Scans for known vulnerabilities in dependencies.
  • Container Scanning: Analyzes container images for security issues.
  • Dashboard: Provides a comprehensive view of security findings and trends.
  • Alerts: Notifies teams of critical vulnerabilities.
  • Integration: Works with popular CI/CD tools like Jenkins, GitLab CI, and GitHub Actions.
  • Customizable: Easily extendable with custom security tools and scripts.
  • Compliance: Helps meet security compliance requirements.

Tools and Technologies

  • SAST: SonarQube
  • SCA: Snyk
  • Container Scanning: Trivy
  • DAST: OWASP ZAP
  • CI/CD: GitHub Actions
  • Dashboard: DefectDojo

About

SafeDeploy is a DevSecOps CI/CD pipeline that integrates security at every stage—featuring automated static analysis (SAST), dependency scanning (SCA), container image scanning, and dynamic testing (DAST)—to detect and mitigate vulnerabilities before deployment.

Topics

Resources

License

Stars

0 stars

Watchers

1 watching

Forks

Contributors