container-security

🔐 50+ MCP Security Servers for AI-Powered Pentesting | Integrate Nmap, Burp Suite, Nuclei, Shodan, BloodHound, Semgrep, Trivy | Model Context Protocol for Cybersecurity

Kubernetes admission webhook that uses cosign verify to check the subject and issuer of the image matches what you expect

🛡️ The fastest Trivy Action for GitHub. Scan Containers, Filesystems, and IaC for vulnerabilities. Supports SBOM, SARIF, and Daily DB Caching.

A complete DevSecOps CI/CD automation pipeline for a Node.js application using GitHub Actions, Docker, Trivy security scanning, and Kubernetes (Minikube), implementing shift-left security and cloud-native deployment practices.

Security Hardening Suite for OpenClaw - 55 rules, enterprise compliance

Audit Docker Compose configurations for risky privileges, mounts, ports, images, and secrets.

DockerShield is a project designed to containerize a React application and scan it for vulnerabilities using **Trivy**. It also generates detailed reports on the security of the created Docker image.

Production-ready 3-tier Kubernetes platform with React, Flask, PostgreSQL, Docker, NGINX Ingress, Metrics Server, and HPA autoscaling.

Instant web security analysis: detect vulnerabilities in HTTP headers, TLS, and CORS with a single scan

Full-stack file processing platform engineered with a complete DevSecOps lifecycle — threat modeling, SAST, SCA, secrets management, container hardening, and CI/CD security gates.

DevSecOps Compliance Hub: React + Node.js + MongoDB + Kubernetes + Trivy Automation

Production-grade cloud-native DevSecOps platform integrating CI/CD automation, Kubernetes orchestration, infrastructure-as-code, automated security enforcement, observability, and operational monitoring workflows.

Project 2.2 of my Cloud Engineering Roadmap: Docker image optimization lab demonstrating multi-stage builds, Alpine Linux runtime separation, and Trivy vulnerability scanning to reduce a Node.js container image from 1.2GB to 87MB while improving production security posture.

Continuously refreshed, scanned, and attested builds of stable upstream container images.

This project demonstrates a DevSecOps pipeline integrating security at every stage

Repo for all Anchore circleci orb source code

Full-stack container image security assessment with Trivy, Flask, React, SQLite, and Random Forest risk classification.

Simulation of a SOC system for container security

Check an exported OCI manifest digest and signed claims against an offline trust policy.

Production-shaped Node + Postgres container stack — non-root, read-only rootfs, health-gated startup, asserted in CI.