Skip to content

This repo provides a **plug-and-play GitHub Actions CI/CD pipeline** for micro-SaaS applications that want security scanning built in from day one.

License

Notifications You must be signed in to change notification settings

joshrainwater/microsaas-security-pipeline

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

12 Commits
 
 
 
 
 
 

Repository files navigation

🛡️ Micro-SaaS Security CI/CD Template

This repo provides a plug-and-play GitHub Actions CI/CD pipeline for micro-SaaS applications that want security scanning built in from day one.

✅ Features

  • 🔍 Static Analysis via Semgrep
  • 🧪 Dependency and Container Scanning via Trivy
  • 🕷️ Dynamic Scanning via OWASP ZAP
  • 🔐 Secret Detection via Gitleaks
  • 📦 Dependency Updates via Dependabot

📦 Usage

Copy the .github direction into your project's root direction and push to GitHub.

That's it! The actions now will run automatically and scan your code for security vulnerabilities.

About

This repo provides a **plug-and-play GitHub Actions CI/CD pipeline** for micro-SaaS applications that want security scanning built in from day one.

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published