devsecops

• 2026-03-054 min

  DefectDojo in Kubernetes: security findings as a first-class CI gate

  DefectDojo HelmRelease, Trivy and SonarQube report upload via API, product and engagement model, SLA enforcement in CI that fails pipelines on unacknowledged high-severity findings.

  securitykubernetescicddevsecops

• 2026-02-264 min

  Trivy Operator in Kubernetes: automated vulnerability scanning

  Trivy Operator deployment via Helm, VulnerabilityReport and ConfigAuditReport CRDs, Prometheus metrics integration, alerting on HIGH/CRITICAL CVEs, and Trivy in GitLab CI with SARIF upload.

  securitykubernetesdevsecopscicd

No posts match the selected filters.