DevSecOps NGINX Webapp on Docker Desktop

This web application demonstrates a secure CI/CD pipeline. It scans standard Docker images for vulnerabilities and generates security reports. Next, it switches to distroless images to minimize potential attack risks. Finally, the pipeline creates a Software Bill of Materials report for the secure image.

Extra Reference Notes are available here

Step by Step Commands to run on VSCode bash terminal and Output Screenshots

Step 1: Run CICD-v1.sh

Output 1

---

Step 2: Run CICD-v2.sh

Output 2

---

Step 3: Run CICD-v3.sh

Output 3

---

Step 4: Run CICD-v4.sh

Output 4

---