Selected work
Case studies in CI/CD security, Secure SDLC, Kubernetes, and practical delivery controls, informed by application security and backend engineering.
3 of 3 projects shown
A public Secure SDLC and DevSecOps boilerplate for running repeatable security checks with SAST, secret scanning, dependency scanning, container scanning, SBOM generation, and IaC policy validation.
A rootless Kubernetes DevSecOps lab that combines GitOps, service mesh, secrets management, network policy, and the DevSecOps Security Scanning Pipeline as part of a controlled Secure SDLC practice environment.
A Linux security reporting project that turns periodic host checks into repeatable text and HTML reports with optional email delivery.