Visitar URL original

Pull requests · devopsabcs-engineering/gh-advsec-devsecops · GitHub

Repository navigation

All pull requests

Labels (12)Milestones (0)New pull request

Bump System.Text.Json from 8.0.4 to 11.0.0
#82dependabot[bot] opened Nov 13, 2026Bot
1
Bump Microsoft.Data.SqlClient from 5.0.2 to 7.1.2
#81dependabot[bot] opened Nov 13, 2026Bot
1
Fix 9 critical IaC security vulnerabilities in Terraform Azure configuration
#57emmanuelknafo opened May 11, 2026Contributor
3
docs(security): sample supply chain analysis for webapp01 (custom agent output)
#56emmanuelknafo opened May 8, 2026Contributor4 tasks done
1
Bump Azure.Identity from 1.13.2 to 1.21.0
#49dependabot[bot] opened Apr 17, 2026Bot
1
chore(deps): Bump aquasecurity/trivy-action from 0.32.0 to 0.34.0 in /.github/workflows in the github_actions group across 1 directory
#41dependabot[bot] opened Feb 18, 2026Bot
2
feat: Add initial implementation of Dockerfile, Pipfile.lock, Terrafo…
#39emmanuelknafo opened Feb 10, 2026Contributor
33
Fresh threat model for gh-aspnet-webapp blueprint
#38emmanuelknafo with CopilotAI opened Feb 10, 2026
Feature/tt343 demo 01
#37emmanuelknafo opened Feb 10, 2026Contributor
33
Bump Newtonsoft.Json from 13.0.1 to 13.0.4
#35dependabot[bot] opened Feb 6, 2026Bot
1
Bump Microsoft.VisualStudio.Azure.Containers.Tools.Targets from 1.21.0 to 1.23.0
#34dependabot[bot] opened Feb 6, 2026Bot
1
Bump Azure.Identity and Microsoft.Data.SqlClient
#33dependabot[bot] opened Feb 6, 2026Bot
1
feat(security): enforce supply chain security for repository
#31emmanuelknafo opened Feb 5, 2026Contributor
1
Harden Bicep IaC: enforce HTTPS, TLS 1.2, SQL TDE, auditing, and diagnostic settings
#27emmanuelknafo with CopilotAI opened Feb 5, 2026
Initial security review plan for web application
#26emmanuelknafo with CopilotAI opened Jan 29, 2026
Security assessment: webapp01 ASP.NET Core application
#25emmanuelknafo with CopilotAI opened Jan 29, 2026
Bump actions/checkout from 5 to 6
#5dependabot[bot] opened Jan 16, 2026Bot
1
Bump anchore/sbom-action from 0.20.5 to 0.21.1
#4dependabot[bot] opened Jan 16, 2026Bot
1
Bump ossf/scorecard-action from 2.4.2 to 2.4.3
#3dependabot[bot] opened Jan 16, 2026Bot
1
Bump zaproxy/action-full-scan from 0.12.0 to 0.13.0
#2dependabot[bot] opened Jan 16, 2026Bot
2
Bump zaproxy/action-baseline from 0.14.0 to 0.15.0
#1dependabot[bot] opened Jan 16, 2026Bot
2