Capstone
Cloud & DevOps
Cloud-Native CI/CD Platform
GitOps pipeline with Kubernetes, Helm and progressive delivery
- Kubernetes
- Docker
- Helm
- Argo CD
- +2
₹5,299₹8,999
4.8/74 reviews
Cloud & DevOps · Capstone
DevSecOps Pipeline with Container Scanning
Code, dependencies and images scanned, with policy gates that block
4-5 weeks build
Overview
Security checks placed where they are cheapest to act on. Every push is scanned for leaked secrets with Gitleaks and for risky code with Semgrep, dependencies and the built image are checked by Trivy, and Open Policy Agent rules decide whether a finding blocks the merge or is only reported. A deliberately vulnerable sample app shows each gate catching something real. It runs entirely on free GitHub Actions minutes.
What makes it stand up
- 01Secret scanning that stops a leaked key before it is merged
- 02Static analysis with Semgrep rules mapped to the OWASP Top 10
- 03Dependency and container image scanning with Trivy
- 04Policy-as-code gates in Rego, with an audited exceptions file
- 05Findings uploaded as SARIF so they appear in the pull request
Module breakdown
- 01
Secrets
Gitleaks in pre-commit and in CI, with history scanning.
- 02
SAST
Semgrep rulesets tuned to cut false positives.
- 03
Supply chain
Trivy filesystem, image and SBOM generation.
- 04
Policy gates
OPA rules on severity, fix availability and exceptions.
- 05
Reporting
SARIF uploads and a findings summary on each run.
After this, you will be able to
- Explain shift-left security and where each scanner belongs
- Defend which findings block a merge and which only warn
- Demo a vulnerable dependency being caught and the fix passing
Technology stack
- GitHub Actions
- Semgrep
- Trivy
- Gitleaks
- Open Policy Agent
- Docker
- Level
- Capstone
- Domain
- Cloud & DevOps
- Build time
- 4-5 weeks
- Difficulty
You receive
- Complete, commented source code
- 60-90 page project report (IEEE format)
- Editable presentation deck
- Architecture, ER and UML diagrams
- Local setup and deployment guide
- Sample dataset or seed data
- Viva question bank with answers
- One 45-minute walkthrough call
- 30 days of doubt-clearing support