Parcourir les catégories
Explorer
Fiverr Pro
Français
$
USD
I will set up a devsecops security pipeline with github actions
Cybersecurity , DevSecOps Engineer
I'm a cybersecurity and DevSecOps practitioner focused on application security, cloud security, CI/CD security automation, and vulnerability management. I build practical security solutions using AWS,...
À propos de ce service
I will set up a practical DevSecOps security pipeline using GitHub Actions to help identify security issues early in your software delivery process.
The pipeline can include:
Semgrep SAST for source-code security analysis
TruffleHog for secret and credential detection
npm audit for dependency vulnerability scanning
Docker for application containerization
Trivy for container image vulnerability scanning
OWASP ZAP for automated DAST testing
GitHub Actions for automated CI/CD security checks
GitHub Container Registry for container image publishing
I can work with your existing application repository and configure the security workflows according to your project requirements.
You will receive a structured and practical security pipeline with clear configuration and documentation.
This service is suitable for developers, students, startups, and small teams looking to introduce security controls into their CI/CD workflow.
Please contact me before ordering if you have specific security tools, requirements, or an existing CI/CD pipeline you want to integrate.
Outils:
Docker
•
GitHub
Frameworks:
Npm
Fournisseur de services cloud:
Amazon Web Services
Langage de programmation:
JavaScript
•
Python
Expertise:
Installation
•
Développement
•
Configuration
FAQ
What do you need from me to start?
I will need the GitHub repository or project details, the existing CI/CD configuration if available, and the security requirements you want to implement. Repository access should be provided through an appropriate and authorized method.
Can you work with an existing GitHub Actions pipeline?
Yes. I can review an existing GitHub Actions workflow and add or improve security checks such as SAST, secret scanning, dependency scanning, container scanning, and DAST.
Which security tools can you configure?
Depending on the project, I can work with Semgrep, TruffleHog, npm audit, Docker, Trivy, OWASP ZAP, GitHub Actions, and GitHub Container Registry.
Do you perform penetration testing?
This Gig focuses on DevSecOps and automated CI/CD security testing. Any security testing is performed only with explicit authorization and within the agreed scope.
Will you provide documentation?
Yes. Documentation can explain the configured workflows, security checks, how they are triggered, and how to interpret or address findings.
