Curation of DevSecOps tools that all work together inside the minimum amount of containers. Just run make exec and read the How To!
-
Updated
Nov 11, 2024 - Dockerfile
#
semgrep
Here are 4 public repositories matching this topic...
Automated container image scanning pipeline using GitHub Actions and Trivy. Builds Docker images, enforces a High/Critical vulnerability gate, and generates HTML reports, SBOMs, and SAST findings. Demonstrates DevSecOps, supply chain security, and CI-based risk controls.
docker devsecops vulnerability-scanning syft container-security ci-pipeline sbom github-actions trivy supply-chain-security semgrep
-
Updated
Nov 27, 2025 - Dockerfile
GitLab mirror of skillward-bundle — deterministic offline scanner image for skillward.
docker security-scanner sarif devsecops container-image ai-security gitleaks trivy semgrep ghcr agent-security apache-2-0 coroboros skillward
-
Updated
Jun 21, 2026 - Dockerfile
Improve this page
Add a description, image, and links to the semgrep topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the semgrep topic, visit your repo's landing page and select "manage topics."