C

cicd

Enterprise CI/CD Kubernetes deployment platform using GitLab CI/CD, Docker, Terraform, Helm, AWS EKS, and Kubernetes automation.

A fully automated 13-stage DevSecOps CI/CD pipeline that integrates security, compliance, and cloud-native deployment using GitLab CI and Amazon EKS.

The pipeline demonstrates real-world DevSecOps practices including:

• SAST, dependency, container, IaC, and Kubernetes manifest scanning • SBOM generation (CycloneDX) • Automated POA&M creation mapped to NIST controls • Evidence packaging for compliance audits • Secure image push to Amazon ECR • Deployment and validation on Amazon EKS • Full run-to-completion behavior (lab mode) with findings documented rather than blocking

This project showcases an end-to-end secure software supply chain workflow suitable for: cloud engineering, DevOps, cybersecurity, and compliance automation demonstrations.

🏗️ Pipeline-of-Trust is a hard-difficulty AWS CTF challenge simulating enterprise CI/CD misconfigurations across multi -account architecture (Staging & Production) with intentional vulnerabilities like SSRF and IAM privilege escalation— goal is to breach from Staging to Production and capture the flag.

🔐 Built with Terraform, it features realistic infrastructure including GitLab CI/CD pipelines, public web services ( invoice renderer, corporate site), and strict Service Control Policies (SCPs) to simulate real-world enterprise security boundaries for penetration testing practice.

Google Cloud Shift-left security demonstration containing infrastructure, continuous delivery pipeline and tooling to support security from within a build pipeline

All DevOps learning concepts and their practical implementations are discussed

Terraform configuration defining policies and auth for running GitLab CICD within CarbonCollins - Cloud

Deploys a GitLab Runner targeting Linux AMD64 systems where jobs run in a standard shell

A collection of templates to run Pluralith in Gitlab CI and automate infrastructure documentation