| Area | Selected work |
|---|---|
| Cloud infrastructure and DevSecOps | Terraform AWS infrastructure, access controls, audit logging, and CI security checks. Secure AWS Platform |
| Application, API and privacy security | Patient-scoped API authorization, reviewed emergency access, and privacy incident assessment in a synthetic lab. CareBoundary |
| AI and agent security | Agent authentication, scoped tool authorization, independent approvals, and audit evidence. MCP Sentinel |
| Identity and device security | Workforce identity lifecycle, account drift checks, device posture, and reviewed lab remediation. WorkforceOps · EndpointOps |
| Detection and response | Security-event intake, response planning, independent approvals, and verified action outcomes. ResponseForge |
| Vulnerability management | Prioritization, remediation tracking, and rescan evidence checks. RemediationOS |
| Security assurance and third-party risk | Control evidence, scoped audit requests, reviewed exceptions, and vendor risk assessment workflows. ControlLedger · VendorScope |
Pinned Loading
-
hardened-container-supply-chain
hardened-container-supply-chain PublicA minimal hardened OCI supply chain with restricted Helm deployment, Go integration tests, reproducible builds, SBOM and vulnerability gates, and verified signed releases.
Go
-
ocisec
ocisec PublicStatic analyzer for OCI runtime specs, flags container-escape misconfigurations as a CI gate.
Go
-
ci-cd-security-pipeline
ci-cd-security-pipeline PublicCI workflows with blocking static, dependency and credential checks, expiring fixture baselines, and tested passing and failing controls.
Python
-
ai-cloud-security-triage-agent
ai-cloud-security-triage-agent PublicEvidence-driven cloud security triage with bounded AI tool use, EPSS/KEV enrichment, reviewed Terraform proposals, approval-gated Jira integration, and an offline reproducible demo.
Python
If the problem persists, check the GitHub status page or contact support.

