WORK IN PROGRESS
This Github repository provides a implementation of DevSecOps for your container workload running in Azure Kubernetes Services.
The application used in this git repository is the EShop on Dapr.
This repository uses GitHub Action but you could use any CI/CD tools to achieve your DevSecOps.
Before listing the tool used in this repository here the flow that it's in place (click on the image to scroll for more details).
- Static Code analysis - Snyk via vscod extension in ID
- Dependency Scan - Snyk inside Github Action
- Container Scan - Azure Defender/Trivy/Snyk in Github Action and on push/schedule with Azure Container Registry
- Infrastructure as Code - Snyk inside Github Action