creation / released
AI DevSecOps Platform
Async ZIP/GitHub security scanning with Semgrep, Trivy, policy evaluation and AI-assisted reports; 102/102 backend tests in the repo audit.
about this build
The mission
I designed the asynchronous scan path: source intake from ZIP or public GitHub, Redis/Celery jobs, Semgrep and Trivy execution, normalized findings, security-policy decisions and AI-assisted reports. The report explains scanner evidence; AI does not independently discover vulnerabilities or override policy. The application has owner-scoped project/scan access and a separate operational admin surface.
Recorded evaluation, not production traffic: the repository's 6 September 2026 audit reports 102/102 backend tests passing. Historical AWS evidence records 4/4 Selenium UI cases and 17/17 benchmark ScanJobs completed. CloudWatch setup documents 8 alarms. The AWS environment is for demo/evaluation; the README explicitly says it is not production-ready or highly available, and the current frontend source still needs redeployment to match AWS.
Role: Designed asynchronous scan, finding and policy flows, AI-assisted reporting, and AWS demo evaluation.
technology
Primary GitHub language: Python
system highlights
- 2 source types and 2 scanner engines
- 102/102 backend tests in the repository audit
- Historical AWS evidence: 4/4 UI cases and 17/17 ScanJobs
HOW IT WAS BUILT
Skills & technology in this project
Skills applied
- Asynchronous job orchestration
- Security finding normalization
- Policy evaluation
- AI-assisted reporting
- Automated testing
Languages
- Python
Tools & platforms
- Celery
- Redis
- Semgrep
- Trivy
- AWS
- CloudWatch
- Selenium