How zahardlazy/securepipe-demo works
SecurePipe Demo combines a deliberately vulnerable Flask sample with a security-focused build-chain demonstration. Its visible runtime workflow is an HTTP client requesting the user endpoint, which initializes/queries a local SQLite database and returns a user or 404. The repository also contains workflow, quality-gate, provenance, and infrastructure areas; their detailed wiring is not shown in the supplied excerpts, so those relationships are left unverified rather than inferred.
Main entry points: workflows GitHub workflows · app.py User endpoint · scripts Quality gate · infra Terraform infrastructure
Components 10
Demo app
- Flask app
app/app.py - User endpoint
app/app.py - SQLite users
app/app.py
Secure build chain
- GitHub workflows
.github/workflows - Quality gate
.github/scripts - Provenance
.github/scripts - Image build
.github/workflows
Deployment
- Deployment
.github/workflows - Terraform infrastructure
infra
Other components
- HTTP client
Connections 7
- HTTP client → User endpoint: requests
app/app.py - User endpoint → SQLite users: queries and seeds
app/app.py - GitHub workflows → Quality gate: runs
- GitHub workflows → Provenance: generates
- GitHub workflows → Image build: builds
- GitHub workflows → Deployment: deploys
- Deployment → Terraform infrastructure: uses