FefoCloud AppSec

Proof Of Concept DevSecOps

Viva o software livre!

Folder Structure

Folder Description
pipeline Jenkinsfiles responsible for application deploy
images Base images to devtools application
$ git clone git@github.com:fefocloud/fefoSecApp.git
$ cd fefocloud/images/jenkins/

Second build the jenkins with docker image

$ sudo docker build -t fefocloud/jenkins:1.0 .

Third executing the container with Docker and Jenkins

sudo docker container run --name jenkins -d --restart=always -p 8080:8080 -p 50000:50000 -u 0 -v jenkins_home:/var/jenkins_home fefocloud/jenkins:1.0

TODO

  • Clone
  • SAST (sonarqube)
  • Build
  • Functional Tests
  • Security Tests
  • Push
  • Deploy with ansible
  • Penetrations tests (prod)
  • Make Data