corpus.blog
41554 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a087a3-aacf-72a3-932b-0dcb5883160d

Designing a DevSecOps GitHub Actions Pipeline for .NET: Quality, SAST, SCA, Signing, and DAST

mehdihadeli.com · published 25 June 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at mehdihadeli.com Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
Links from this post
46
Words captured
16,512

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://github.com/mehdihadeli/dotnet-github-actions-pipeline/blob/main/.github/workflows/ci.yaml
github.com
https://github.com/mehdihadeli/dotnet-github-actions-pipeline/blob/main/.github/workflows/cd.yaml
github.com
https://github.com/mehdihadeli/dotnet-github-actions-pipeline/blob/main/.github/actions/setup/action.yml
github.com
https://github.com/mehdihadeli/dotnet-github-actions-pipeline/tree/main/.github/actions/format
github.com
https://github.com/mehdihadeli/dotnet-github-actions-pipeline/tree/main/.github/actions/style
github.com
https://github.com/mehdihadeli/dotnet-github-actions-pipeline/tree/main/.github/actions/analyzers
github.com
https://github.com/mehdihadeli/dotnet-github-actions-pipeline/tree/main/.github/actions/build
github.com
https://github.com/mehdihadeli/dotnet-github-actions-pipeline/tree/main/.github/actions/test
github.com
https://github.com/mehdihadeli/dotnet-github-actions-pipeline/blob/main/.github/actions/resolve-version-metadata/action.yml
github.com
https://github.com/mehdihadeli/dotnet-github-actions-pipeline/blob/main/.github/actions/create-ci-evidence/action.yml
github.com
https://github.com/mehdihadeli/dotnet-github-actions-pipeline/blob/main/.github/actions/download-ci-evidence-artifacts/action.yml
github.com
https://github.com/mehdihadeli/dotnet-github-actions-pipeline/blob/main/.github/actions/sign-published-image/action.yml
github.com
https://github.com/mehdihadeli/dotnet-github-actions-pipeline/blob/main/.github/actions/verify-keyless-image-signature/action.yml
github.com
https://github.com/mehdihadeli/dotnet-github-actions-pipeline/blob/main/.github/actions/sign-keyless-blob/action.yml
github.com
https://github.com/mehdihadeli/dotnet-github-actions-pipeline/tree/main/.husky
github.com
https://github.com/mehdihadeli/dotnet-github-actions-pipeline/tree/main/src/DevSecOpsPipelineSample.Api
github.com
https://github.com/mehdihadeli/dotnet-github-actions-pipeline/blob/main/docs/index.md
github.com
https://github.com/mehdihadeli/dotnet-github-actions-pipeline/blob/main/deployments/dependency-track/docker-compose.yml
github.com
https://github.com/mehdihadeli/dotnet-github-actions-pipeline/blob/main/deployments/dependency-track/README.md
github.com
https://github.com/mehdihadeli/dotnet-github-actions-pipeline/blob/main/deployments/dependency-track/.env.example
github.com
https://github.com/mehdihadeli/dotnet-github-actions-pipeline/blob/main/deployments/dependency-track/bootstrap-trivy.sh
github.com
https://github.com/mehdihadeli/dotnet-github-actions-pipeline/actions/runs/28261736991/job/83740117337
github.com
https://www.sigstore.dev
sigstore.dev
https://github.com/mehdihadeli/dotnet-github-actions-pipeline/blob/main/.github/actions/publish/action.yml
github.com
https://github.com/gitleaks/gitleaks
github.com
https://github.com/hadolint/hadolint
github.com
https://semgrep.dev
semgrep.dev
https://codeql.github.com
codeql.github.com
https://github.com/bridgecrewio/checkov
github.com
https://github.com/aquasecurity/trivy
github.com
https://github.com/anchore/grype
github.com
https://snyk.io
snyk.io
https://k6.io
k6.io
https://www.zaproxy.org
zaproxy.org
https://github.com/mehdihadeli/dotnet-github-actions-pipeline/tree/main/deployments/dependency-track
github.com
https://github.com/mehdihadeli/dotnet-github-actions-pipeline/blob/main/.husky/pre-commit
github.com
https://github.com/mehdihadeli/dotnet-github-actions-pipeline/blob/main/.husky/pre-push
github.com
https://github.com/mehdihadeli/dotnet-github-actions-pipeline/blob/main/.husky/task-runner.json
github.com
https://github.com/mehdihadeli/dotnet-github-actions-pipeline
github.com
https://github.com/mehdihadeli/dotnet-github-actions-pipeline/blob/main/docs/architecture.md
github.com
https://github.com/mehdihadeli/dotnet-github-actions-pipeline/blob/main/docs/ci-cd-pipeline.md
github.com
https://github.com/vergil-project/vergil-tooling/issues/108
github.com
https://github.com/djvirus9/awesome-devsecops-mastery-2026
github.com
SBOM for .NET in Docker: stop trying to force one tool to see everything Read at the source ↗
startdebugging.net
https://sbomgenerator.com/guides/dotnet
sbomgenerator.com
https://github.com/of3r/devsecops-artifactory-lab/blob/main/.github/workflows/ci-pipeline.yml
github.com