DevOps

Checkov IaC Security scans Terraform, CloudFormation, Kubernetes, Dockerfiles, and ARM templates for misconfigurations, secrets, and compliance issues. Use it to validate infrastructure before deployment and generate audit reports.

DefectDojo Vulnerability Management aggregates scanner findings into DefectDojo for deduplication, SLA tracking, and compliance reporting. Use it to manage vulnerability backlogs and remediation across products, teams, and pipelines.

Hadolint Dockerfile Linting scans Dockerfiles for security misconfigurations, anti-patterns, and CIS Docker Benchmark issues. Use it in development or CI to catch unsafe instructions and get remediation guidance before images are built.

Nano Doctor checks a local nanostack install for dependency, permission, telemetry, and worker reachability issues. Use it when you need to diagnose whether the install is healthy or needs `--fix` or a reinstall.

Policy OPA enforces security and compliance rules with Open Policy Agent and Rego. Use it to validate Kubernetes admission policies, audit configuration drift, and add policy checks to CI/CD pipelines.

Release Readiness composes upstream review, QA, security, license, and privacy evidence into a release verdict before /ship. Use it when you need a final OK, WARN, or BLOCKED decision from saved artifacts.

Secrets Detection With Gitleaks scans git repositories and codebases for hardcoded passwords, API keys, tokens, and credentials. Use it to audit code, add pre-commit protection, and integrate secret checks into CI/CD or history cleanup workflows.

Ship takes code from done to verified in production by handling pre-flight checks, PR creation, CI, deployment, and post-deploy verification. Use it when you need to move changes through the full release pipeline.

Release Workflow covers publishing jMunch releases, updating version pins, and handling PR review, merge, and closure steps. Use it before version bumps, package uploads, tags, registry publishes, or release-related PR actions.

State Snapshot captures all committed memory regions and the full processor state from a live debuggee for offline analysis. Use it when you need a disk snapshot of memory and registers from x64dbg.

Release Audit reviews release readiness, changelog quality, compatibility and migration risk, package metadata, docs sync, rollback plans, and registry or tag risks before publication. It is used for pre-release review and risk checks, not for performing the release.

AWS Cloud Infrastructure deploys Node.js apps on AWS with EC2, RDS, IAM, security groups, and monitoring. Use it when setting up cloud infrastructure, databases, secrets, or cost-conscious production hosting.