This repo provides a plug-and-play GitHub Actions CI/CD pipeline for micro-SaaS applications that want security scanning built in from day one.
- 🔍 Static Analysis via Semgrep
- 🧪 Dependency and Container Scanning via Trivy
- 🕷️ Dynamic Scanning via OWASP ZAP
- 🔐 Secret Detection via Gitleaks
- 📦 Dependency Updates via Dependabot
Copy the .github direction into your project's root direction and push to GitHub.
That's it! The actions now will run automatically and scan your code for security vulnerabilities.