https://meddah.systems/tags/trivy/Recent content in Trivy on MEDDAH MohamedHugo -- gohugo.ioenSat, 01 Aug 2026 00:00:00 +0000https://meddah.systems/post/infrastructure/devsecops-pipeline/Sat, 01 Aug 2026 00:00:00 +0000https://meddah.systems/post/infrastructure/devsecops-pipeline/<blockquote> <p>🚧 <strong>Full write-up coming soon.</strong> Architecture, pipeline YAML, and scan result examples are being documented.</p> </blockquote> <h2 id="overview"><a href="#overview" class="header-anchor"></a>Overview </h2><p>A production-ready Secure SDLC pipeline that integrates four scanning layers into a GitHub Actions workflow. Build gates reject automatically when critical CVEs or exposed credentials are detected.</p> <h2 id="pipeline-stages"><a href="#pipeline-stages" class="header-anchor"></a>Pipeline Stages </h2><table> <thead> <tr> <th>Stage</th> <th>Tool</th> <th>Purpose</th> </tr> </thead> <tbody> <tr> <td>SAST</td> <td>Semgrep</td> <td>Static code analysis</td> </tr> <tr> <td>Secrets Scanning</td> <td>truffleHog</td> <td>Credential leak detection</td> </tr> <tr> <td>Container Scanning</td> <td>Trivy</td> <td>Image CVE analysis</td> </tr> <tr> <td>DAST</td> <td>OWASP ZAP</td> <td>Dynamic runtime scanning</td> </tr> </tbody> </table> <h2 id="stack"><a href="#stack" class="header-anchor"></a>Stack </h2><p><code>Python</code> <code>GitHub Actions</code> <code>Trivy</code> <code>Semgrep</code> <code>OWASP ZAP</code> <code>truffleHog</code> <code>Docker</code></p> <h2 id="status"><a href="#status" class="header-anchor"></a>Status </h2><ul> <li><input checked="" disabled="" type="checkbox"> Pipeline engineered and functional</li> <li><input checked="" disabled="" type="checkbox"> Severity triage and build gates configured</li> <li><input disabled="" type="checkbox"> Full write-up and YAML reference in progress</li> </ul>