Browse categories
Explore
Fiverr Pro
English
$
USD
I will build a secure ci cd pipeline with trivy cosign and sbom for devsecops
DevOps Engineer, DevSecOps, Kubernetes Administrator, Cloud Infrastructure, IAM
I'm a DevOps and Cloud Engineer with hands on experience in AWS, Azure, Kubernetes, and Docker. I build CI/CD pipelines with Jenkins and GitLab, deploy apps on Kubernetes using Helm, and set up monito...
About this Gig
️ Stop shipping vulnerable code. Start shipping verified releases.
Most CI/CD pipelines deploy fast but don't verify safety. One vulnerable dependency or unsigned image exposes your production.
I build security-gated CI/CD pipelines that scan for vulnerabilities, sign images, generate SBOMs, and block insecure deployments BEFORE production.
WHAT YOU GET
Trivy Vulnerability Scanning builds fail on critical CVEs automatically
Cosign Image Signing cryptographically prove image authenticity
SBOM Generation SPDX or CycloneDX for SOC 2 and ISO 27001
Gitleaks Secret Scanning no leaked keys in your repo
SonarQube Quality Gates code issues flagged before merge
Full Pipeline GitHub Actions, GitLab CI, Jenkins, or Argo CD
Documentation & Handover README + walkthrough call
PERFECT FOR
Startups preparing for SOC 2 or enterprise reviews. DevOps teams adding security without slowing down. Companies recovering from incidents.
️ TOOLS
GitHub Actions, GitLab CI, Jenkins, Argo CD, Trivy, Cosign, Gitleaks, SonarQube, Docker, Kubernetes, Helm, Terraform, Ansible, AWS, Azure.
Message me with your repo, CI tool, and compliance needs. I'll reply with a fixed quote.
Tools:
Docker
•
GitLab
•
Jenkins
•
GitHub
•
Other
Frameworks:
Terraform
•
Ansible
Programming language:
Bash
•
C
•
Python
Expertise:
Installation
•
Development
•
Configuration
My Portfolio
Other DevOps Engineering Services I Offer
FAQ
Will this slow down my deployments?
No. Security scans run in parallel where possible, and I tune thresholds to match your risk tolerance. Most pipelines add only 2–4 minutes to a build.
I already have a CI/CD pipeline. Can you add security to it?
Yes. I retrofit Trivy, Cosign, SBOM, and Gitleaks into existing GitHub Actions, GitLab CI, or Jenkins pipelines.
Do you work with private repositories?
Yes. Add me as a collaborator or provide temporary access. I sign an NDA on request.
What if I don't use Docker or Kubernetes?
The pipeline still works. I scan source code, dependencies, and artifacts even without containers. Message me with your stack and I'll confirm.
Which CI/CD tool should I choose?
If undecided, I recommend GitHub Actions for simplicity or GitLab CI for integrated security. I'll advise based on your existing stack.
Do I get the source code and configuration files?
Yes. Every pipeline file, scan config, and documentation is handed over to you, you own everything.
What if something breaks after delivery?
Premium includes 7 days of post-delivery support. For Basic and Standard, I offer one free fix within 3 days of delivery.
