← Back to projects
SecurityActiveOpen source

DevSecOps Starter Kit

A toolkit that bakes security into a repository from the first commit: pre-commit hooks, secret scanning, container and IaC scanning, all wired into a single GitHub Actions pipeline so problems are caught before merge.

Highlights

  • Secret + container + IaC scanning
  • pre-commit + CI enforcement
  • Copy-paste into any repo

Tech Stack

pre-commitgitleaksTrivytfseccheckovhadolint

Reactions & comments