Hari 47: DefectDojo API — 7 Scans, 16 Findings Centralized
Upload 7 scanner reports (Trivy, Semgrep, Checkov) ke DefectDojo via import-scan API. 15 tests imported, 46 findings centralized. upload-scans.sh script + conditional CI job. ZAP needs XML format.
25 Jul 20264 min read
Hari 29: Pipeline Consolidation — Satu Pipeline, 8 Scanner
Dari 2 file workflow jadi 1. Semua 7 scanner (Gitleaks, Trivy, Semgrep, ZAP, Checkov) plus security gate di satu pipeline. 8/8 jobs green.
6 Jul 20263 min read
Hybrid-Cloud Aman: Terraform & WIF di Google Cloud
Bangun infra GCP modular via Terraform. Pelajari VPC Peering hingga implementasi Keyless CI/CD dengan GitHub Actions & Workload Identity Federation.
26 Feb 20264 min read