A Go-based CLI tool to automate the upload and lifecycle management of Software Bill of Materials (SBOM) in OWASP Dependency-Track.

Terraform module to provision a secure, highly available GCP VPC platform (asia-south1) with public/private subnets, Cloud NAT, IAP for SSH, and target-tag based firewalls. Comes with Python automation for easy setup and teardown.

"This is a simulated DevSecOps pipeline demo using a vulnerable Flask app, integrated with GitHub Actions CI and security tools like Bandit and Semgrep. It simulates how real companies automate vulnerability scanning in CI/CD."