A comprehensive collection of security automation scripts, configurations, and templates for cloud-native environments.
Built by a DevSecOps Engineer with 7+ years of production experience securing enterprise cloud infrastructures.
This repository contains practical DevSecOps tools and configurations I've developed during my 7+ years securing cloud-native environments. These scripts automate security scanning, compliance checking, and infrastructure hardening across AWS, Kubernetes, and CI/CD pipelines.
├── aws-security/ # AWS security automation scripts
├── kubernetes-security/ # Kubernetes security configurations
├── ci-cd-templates/ # Security-focused CI/CD templates
├── terraform-modules/ # Secure infrastructure modules
├── compliance-scripts/ # Compliance checking and reporting
└── monitoring/ # Security monitoring configurations
# Clone the repository
git clone https://gitlab.com/securedbyfajobi/devsecops-toolkit.git
cd devsecops-toolkit
# Example: Run AWS security assessment
cd aws-security
python3 security-audit.py --region eu-west-2
# Example: Apply Kubernetes security policies
cd kubernetes-security
kubectl apply -f pod-security-standards/- AWS Security Automation - GuardDuty, Security Hub, Config automation
- Kubernetes Hardening - Pod Security Standards, RBAC, Network Policies
- Terraform Security - Secure modules with built-in compliance
- Pipeline Integration - SAST/DAST scanning templates
- GitLab CI/CD - Security-first pipeline configurations
- Automated Scanning - Container image and code vulnerability detection
- ISO 27001 - Automated compliance checking
- GDPR - Data protection validation scripts
- PCI-DSS - Payment card industry compliance tools
- Cloud Platforms: AWS, Kubernetes
- Infrastructure: Terraform, Ansible
- CI/CD: GitLab CI/CD, GitHub Actions, Jenkins
- Security Tools: Falco, Sysdig, Wiz, Snyk, SonarQube
- Languages: Python, Bash, Go
Each directory contains:
- README.md - Detailed usage instructions
- Example configurations - Ready-to-use templates
- Documentation - Implementation guides
These tools have been used in production environments to:
- ✅ Achieve 99.9% infrastructure uptime
- ✅ Detect 95% of vulnerabilities pre-deployment
- ✅ Reduce security incident response time by 50%
- ✅ Automate compliance reporting (70% reduction in manual effort)
Contributions are welcome! Please read the contributing guidelines before submitting PRs.
Adeyinka Fajobi - DevSecOps & Cloud Security Engineer
Built with ❤️ for the DevSecOps community