tag: devsecops
- DefectDojo in Kubernetes: security findings as a first-class CI gate DefectDojo HelmRelease, Trivy and SonarQube report upload via API, product and engagement model, SLA enforcement in CI that fails pipelines on unacknowledged high-severity findings.
- Trivy Operator in Kubernetes: automated vulnerability scanning Trivy Operator deployment via Helm, VulnerabilityReport and ConfigAuditReport CRDs, Prometheus metrics integration, alerting on HIGH/CRITICAL CVEs, and Trivy in GitLab CI with SARIF upload.
No posts match the selected filters.