How aryasundaresh1/blockchain-devsecops works
This is an incrementally developed DevSecOps enforcement framework: its intended workflow runs a CI/CD pipeline, performs security scans, makes a severity-based decision, records an audit event, and deploys only when allowed. The current implementation includes a Flask application and a standalone decision engine; scanning integrations, blockchain logging, and deployment enforcement are largely planned. The workflow edges reflect the README’s documented design, not verified runtime wiring.
Main entry points: decision_engine.py Security decision engine · Jenkinsfile Jenkins pipeline · app.py Flask application
Components 15
CI/CD pipeline
- Jenkins pipeline
Jenkinsfile - Build and test
Jenkinsfile
Security checks
- Security scanning
- SAST · Semgrep
- SCA · planned
- Secret detection · Gitleaks
- Config scan · planned
- Scan findings
- Security decision engine
security/decision_engine.py
Audit and deployment
- Block deployment
- Allow pipeline
- Blockchain audit · planned
- Deployment · planned
- Flask application
application/app.py
Other components
- GitHub repository
Connections 14
- GitHub repository → Jenkins pipeline: triggers pipeline
README.md - Jenkins pipeline → Build and test: runs build and tests
README.md - Build and test → Security scanning: starts after success
README.md - Security scanning → SAST · Semgrep: includes
README.md - Security scanning → SCA · planned: planned check
README.md - Security scanning → Secret detection · Gitleaks: includes
README.md - Security scanning → Config scan · planned: planned check
README.md - Security scanning → Scan findings: produces results
README.md - Scan findings → Security decision engine: supplies results
README.md - Security decision engine → Block deployment: blocks on high severity
README.md - Security decision engine → Allow pipeline: continues if clear
README.md - Allow pipeline → Blockchain audit · planned: records decision
README.md - Blockchain audit · planned → Deployment · planned: logs before deployment
README.md - Deployment · planned → Flask application: deploys application
README.md