Secure CI/CD Template (Just Fork & Go)

Production-ready secure pipeline I use for every microservice at Jovicorp.

What it does automatically

• SAST (Semgrep)
• SCA (Trivy + Dependabot)
• Container scanning
• Secrets detection
• Terraform plan + security check
• OIDC authentication to Azure/AWS (no long-lived credentials)
• Automatic PR security gating

How to?

1. Fork this repo
2. Enable GitHub Actions
3. Add your cloud OIDC role → Done. Your pipeline is now more secure than 98 % of startups.

Stacks