security-gate

Simple and pratical security gate for Github Security Alerts

Security-Goat is a command line client to perform Security Gate written in Go. It interacts with DependaBot alerts using GitHub GraphQL API.

Mantis is a template-driven DAST and application validation engine for CI/CD pipelines - smoke tests, passive/active scanning, OpenAPI-driven API checks and an environment-aware security gate, in one deterministic tool.

Certify AI agents are safe for your internal web app before granting production access. CLI + MCP server, npm/PyPI.

🛡️ Zero-trust security gate & vulnerability scanner for AI agent skills (Claude Code, Antigravity, OpenCode, Codex). Powered by NVIDIA SkillSpector.

Docker Build & Trivy Vulnerability Scanning Pipeline

Security findings are generated by industry-standard scanners (Bandit, pip-audit, Gitleaks) and enforced via a custom Python policy-as-code gate, with optional AI-assisted remediation summaries.

Pipeline CI/CD DevSecOps con Jenkins, Trivy, OWASP ZAP y Security Gate

DevSecOps CI/CD pipeline utilizing GitHub Actions to implement automated security gates and continuous security scanning for application workflows.

Simple Prompt Injection and Policy Enforcement Pipeline for LLM

Self-building hardened RHEL 9 lab — CIS/STIG remediation as code, measured before/after

Read-only local security gate & scanner for AI coding workflows, MCP, and package hallucination risks.

Hands-on DevSecOps demo: a hardened, multi-stage Docker build for a Flask app with a Trivy CI security gate, SBOM generation (Syft), Docker Scout scanning, digest-pinned base images, and documented CVE exceptions. Build fails on HIGH/CRITICAL vulns.

IaC security gate — pre-commit + CI blocking secrets and misconfig before merge

Security scan orchestrator and merge gate for CI. Runs Semgrep, Gitleaks and Trivy, merges results into SARIF, reports to your tracker and fails the pipeline only on new findings.