Practice project with a basic CI pipeline using GitHub Actions, Gradle, Java (with Spring Boot, Junit & Jacoco), Trivy and Docker.

This repo contains the technology stack and its usage for software supply chain security of a Java application

Harbor Plugin for Jenkins

This is a Maven plugin developed to simplify the process of scanning Docker images for vulnerabilities using Trivy.

Demo repository for my talk at the Heise Developer Experience 2022 conference.

This project provides a baseline to help you build Docker images.

CI/CD Pipeline for SecureShop Java App with Jenkins, Maven, Git, Trivy, SonarQube, Kubernetes, Nexus, ECR, Amazon EKS

🎨 Java library template • Gradle Kotlin DSL • GitHub Actions CI/CD to build, release & publish to Maven Central • Renovate • Trivy • Javadoc (Pages) • Issue & PR Templates

Demo repository for my talk at the Heise Developer Experience 2022 conference.

HummerRisk 是云原生安全平台，包括混合云安全治理和云原生安全检测。

Udemy Course on DevSecOps