Back to search
Top Contributors
1
commits
Python project showcasing a DevSecOps pipeline with GitHub Actions. Integrates Semgrep, Gitleaks, and pip-audit to scan commits for insecure code, secrets, and vulnerable dependencies, with branch protection to block merges on high-severity findings.
Stars
1
Forks
0
Watchers
1
Open Issues
4
Overall repository health assessment
No package.json found
This might not be a Node.js project
1
commits
ci(trivy): set unique categories for multiple SARIF uploads
8ab9839View on GitHubci: add Trivy container scanning (SARIF + Code Scanning)
43d7d49View on GitHubci: convert pip-audit JSON to SARIF and upload to Code Scanning
5a5fe04View on GitHub