Summary of Your Pipeline Workflow Pipeline Highlights: Jenkins-driven CI/CD pipeline with GitHub webhook Static code analysis via SonarQube OWASP dependency check and Trivy file scan Docker image build, scan (Docker Scout), and push to DockerHub ...
Introduction This project demonstrates how to build a complete DevOps pipeline for a Node.js application using Jenkins, Docker, Trivy, SonarQube, and OWASP security checks. The pipeline automates every step from pulling the code from GitHub to deploy...
Learn to install SonarQube on Ubuntu 24.04, enhancing code quality and security with detailed insights and static analysis. Contents Prerequisites Set Up a PostgreSQL Database for SonarQube Install SonarQube Configure SonarQube Access SonarQube ...
Git Repository: https://github.com/subrotosharma/Blue-Green-Deployment-with-CICD In today's fast-paced DevOps world, delivering high-quality applications with minimal downtime is a key business requirement. Blue-Green Deployment has emerged as a popu...
SonarQube In today's fast-paced software development landscape, maintaining high code quality and security is paramount. SonarQube emerges as a comprehensive solution, offering developers and organizations the tools needed to ensure clean, maintainab...
In this project, we leverage Jenkins to create a robust CI/CD pipeline that integrates tools like Docker, Trivy, SonarQube, and OWASP Dependency Check to deliver secure and high-quality software. Tools used: GitHub Jenkins Docker OWASP Trivy So...
This blog post will guide you through setting up a CI/CD pipeline for a (Starbucks) Nodejs application, streamlining the build, deployment, and integration process. Using Jenkins, Docker, and GitHub, we'll automate every step, ensuring efficient and ...
Recently, I completed an exciting DevOps hands-on project: setting up a CI/CD pipeline from scratch on AWS using Jenkins, Docker, SonarQube, Maven, and Trivy. This blog details the complete journey, including commands, configurations, and screenshots...
In a fast-moving industry like tech, the difference between staying ahead and falling behind often comes down to the tools you use. Whether you are coding UI components, managing infrastructure, or scaling apps across the cloud, your stack is your su...
SonarQube is a powerful open-source tool that helps you maintain code quality and security by analyzing your codebase for bugs and vulnerabilities. And it can play a major role when integrated into your CI/CD pipeline. In this tutorial, we will cover...
