A Go-based CLI tool to automate the upload and lifecycle management of Software Bill of Materials (SBOM) in OWASP Dependency-Track.

Terraform module to provision a secure, highly available GCP VPC platform (asia-south1) with public/private subnets, Cloud NAT, IAP for SSH, and target-tag based firewalls. Comes with Python automation for easy setup and teardown.

"This is a simulated DevSecOps pipeline demo using a vulnerable Flask app, integrated with GitHub Actions CI and security tools like Bandit and Semgrep. It simulates how real companies automate vulnerability scanning in CI/CD."

An enterprise-grade, cloud-native DevSecOps and GitOps monorepo platform featuring fully automated CI/CD safety gating, vulnerability scanning, and declarative continuous delivery using GitHub Actions, SonarCloud, Trivy, and ArgoCD