What is devsecops-pipeline?

DevSecOps Pipeline is a demonstration project that wires together a complete automated software delivery process, from a code push through security scanning, infrastructure creation, deployment, and monitoring, using a set of open-source and cloud tools. The pipeline runs eight stages in sequence. When a developer pushes code to GitHub, Jenkins (an automation server) picks it up. First, Trivy, a security scanning tool, checks the source code for known vulnerabilities in its dependencies. Then Docker packages the application into a container image and pushes it to DockerHub. Trivy then scans that container image for a second round of security checks at the operating-system level. Next, Terraform provisions an AWS EC2 virtual machine with a 20GB storage volume. Ansible then connects to that fresh EC2 instance over SSH, installs Docker, and deploys the application along with the monitoring stack. Finally, Prometheus collects hardware and container metrics, and Grafana visualizes them in dashboards. Security scanning happens at two points rather than one, once before the image is built and once after, so that both application dependencies and container base layers are vetted before anything reaches production. The observability setup uses Prometheus to scrape metrics from a Node Exporter agent running on the server, and Grafana Dashboard 1860 (Node Exporter Full) to display CPU, memory, and disk metrics. The infrastructure code is written in HCL (HashiCorp Configuration Language), Terraform's native language. This is a learning and demonstration project showing a full DevSecOps lifecycle on AWS.