container-security

🔐 50+ MCP Security Servers for AI-Powered Pentesting | Integrate Nmap, Burp Suite, Nuclei, Shodan, BloodHound, Semgrep, Trivy | Model Context Protocol for Cybersecurity

Kubernetes admission webhook that uses cosign verify to check the subject and issuer of the image matches what you expect

Shrinking a Node.js Docker image step by step: base images, Alpine, multi-stage builds, distroless, static binaries

🛡️ The fastest Trivy Action for GitHub. Scan Containers, Filesystems, and IaC for vulnerabilities. Supports SBOM, SARIF, and Daily DB Caching.

A complete DevSecOps CI/CD automation pipeline for a Node.js application using GitHub Actions, Docker, Trivy security scanning, and Kubernetes (Minikube), implementing shift-left security and cloud-native deployment practices.

Security Hardening Suite for OpenClaw - 55 rules, enterprise compliance

Audit Docker Compose configurations for risky privileges, mounts, ports, images, and secrets.

DockerShield is a project designed to containerize a React application and scan it for vulnerabilities using **Trivy**. It also generates detailed reports on the security of the created Docker image.

DevSecOps Compliance Hub: React + Node.js + MongoDB + Kubernetes + Trivy Automation

Production-ready 3-tier Kubernetes platform with React, Flask, PostgreSQL, Docker, NGINX Ingress, Metrics Server, and HPA autoscaling.

Full-stack file processing platform engineered with a complete DevSecOps lifecycle — threat modeling, SAST, SCA, secrets management, container hardening, and CI/CD security gates.

Instant web security analysis: detect vulnerabilities in HTTP headers, TLS, and CORS with a single scan

Dockerfile and Docker Compose security linter: root users, unpinned or EOL base images, hardcoded secrets, curl | sh, disabled TLS/GPG checks, sensitive COPY, missing .dockerignore, privileged containers, docker.sock mounts, host namespaces and dangerous capabilities. Zero deps.

Production-grade cloud-native DevSecOps platform integrating CI/CD automation, Kubernetes orchestration, infrastructure-as-code, automated security enforcement, observability, and operational monitoring workflows.

Full-stack container image security assessment with Trivy, Flask, React, SQLite, and Random Forest risk classification.

Project 2.2 of my Cloud Engineering Roadmap: Docker image optimization lab demonstrating multi-stage builds, Alpine Linux runtime separation, and Trivy vulnerability scanning to reduce a Node.js container image from 1.2GB to 87MB while improving production security posture.

Continuously refreshed, scanned, and attested builds of stable upstream container images.

Monitor macOS security events in real time with a lightweight agent that detects threats and visualizes alerts through a fast, clear dashboard.

DevSecOps security pipeline with GitLab CI/CD, Semgrep, Gitleaks, npm audit, Docker, and Trivy.

Production-shaped Node + Postgres container stack — non-root, read-only rootfs, health-gated startup, asserted in CI.