Case Study

Secure Expense Manager with End-to-End DevSecOps Pipeline

Full-stack secure web application built with Spring Boot and PostgreSQL, demonstrating a complete DevSecOps CI/CD pipeline. Implements automated secret scanning (Gitleaks), dependency vulnerability scanning (Trivy + Snyk), Docker container security, image signing (Cosign), SAST (SonarCloud), and Dynamic Application Security Testing (OWASP ZAP). Deployed on Render with GitHub Actions automation for continuous security integration.