{"id":28924006,"url":"https://github.com/trivediayush/devsecops-ci-pipeline","last_synced_at":"2026-04-10T12:31:45.371Z","repository":{"id":298426238,"uuid":"999691307","full_name":"trivediayush/devsecops-ci-pipeline","owner":"trivediayush","description":"A fully functional DevSecOps Continuous Integration (CI) pipeline using GitHub Actions.","archived":false,"fork":false,"pushed_at":"2025-06-20T07:03:50.000Z","size":563,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":0,"default_branch":"master","last_synced_at":"2025-08-10T00:22:04.748Z","etag":null,"topics":["cicd-pipeline","declarative-pipeline","devsecops","devsecops-pipeline","docker","docker-compose","github-actions","github-actions-ci","gitleaks-pass","jenkins","jenkins-declarative","python","sonarqube","synk","synk-configuration","terraform"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/trivediayush.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2025-06-10T16:30:10.000Z","updated_at":"2025-06-20T07:03:53.000Z","dependencies_parsed_at":"2025-06-18T11:33:12.317Z","dependency_job_id":null,"html_url":"https://github.com/trivediayush/devsecops-ci-pipeline","commit_stats":null,"previous_names":["trivediayush/zerotouch-env-provisioner","trivediayush/declarative-sonarqube-ci-cd","trivediayush/devsecops-ci-pipeline"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/trivediayush/devsecops-ci-pipeline","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/trivediayush%2Fdevsecops-ci-pipeline","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/trivediayush%2Fdevsecops-ci-pipeline/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/trivediayush%2Fdevsecops-ci-pipeline/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/trivediayush%2Fdevsecops-ci-pipeline/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/trivediayush","download_url":"https://codeload.github.com/trivediayush/devsecops-ci-pipeline/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/trivediayush%2Fdevsecops-ci-pipeline/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":31642711,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-04-10T07:40:12.752Z","status":"ssl_error","status_checked_at":"2026-04-10T07:40:11.664Z","response_time":98,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["cicd-pipeline","declarative-pipeline","devsecops","devsecops-pipeline","docker","docker-compose","github-actions","github-actions-ci","gitleaks-pass","jenkins","jenkins-declarative","python","sonarqube","synk","synk-configuration","terraform"],"created_at":"2025-06-22T10:02:50.388Z","updated_at":"2026-04-10T12:31:45.319Z","avatar_url":"https://github.com/trivediayush.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"DevSecOps CI Pipeline\n=====================\n\nThis repository demonstrates a fully functional DevSecOps Continuous Integration (CI) pipeline using GitHub Actions. It integrates static code analysis, secret scanning, unit testing, and dependency vulnerability scanning using open-source tools.\n\n📌 Project Overview\n-------------------\n\n*   **Language:** Python\n*   **CI/CD:** GitHub Actions\n*   **Security Tools:** SonarCloud, Gitleaks, Snyk\n*   **Testing Framework:** Pytest\n\n🛠️ Tools Used\n--------------\n\n*   GitHub Actions\n*   SonarCloud (Code Quality \u0026 Static Analysis)\n*   Gitleaks (Secrets Detection)\n*   Snyk (Vulnerability Scanning)\n*   Pytest (Unit Testing)\n\n📋 Steps to Run Locally\n-----------------------\n\n1.  Clone the repository:\n\n    git clone https://github.com/trivediayush/devsecops-ci-pipeline.git\n    cd devsecops-ci-pipeline\n\n3.  Install dependencies:\n\n    pip install -r requirements.txt\n\n5.  Run unit tests:\n\n    pytest tests/\n\n7.  Optional: Run security scans locally\n\n*   Gitleaks: `gitleaks detect --source . --config .gitleaks.toml`\n*   Snyk: `snyk test`\n\n\n📈 CI Pipeline Stages\n---------------------\n\n1.  Code Checkout\n2.  Python Environment Setup\n3.  Install Dependencies\n4.  Run Unit Tests\n5.  SonarCloud Scan\n6.  Gitleaks Secret Scan\n7.  Snyk Vulnerability Scan\n\n🧭 Architecture Diagram\n-----------------------\n\n\u003cimg src=\"images/devsecops.png\"\u003e\n\n🧭 Output Images\n-----------------------\n\n\u003cimg src=\"images/output0.png\"\u003e\n\u003cimg src=\"images/output1.png\"\u003e\n\u003cimg src=\"images/output2.png\"\u003e\n\n👤 Author\n-----------------------\n\n# Ayush Trivedi","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ftrivediayush%2Fdevsecops-ci-pipeline","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Ftrivediayush%2Fdevsecops-ci-pipeline","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ftrivediayush%2Fdevsecops-ci-pipeline/lists"}