Raja Nagori

Share your repo (or redacted workflow YAMLs). We’ll audit your CI/CD security posture and design a realistic hardening plan.

We’ll cover:

- SAST / SCA / container scanning (CodeQL, Semgrep, Trivy, Dependabot, etc.)

- Secret scanning and pre-commit / CI gates

- SBOM + visibility (SARIF, CycloneDX, Security tab)

- Merge policies: what should block vs warn

- What’s missing vs what’s noise (false-positive / triage tips)

You’ll leave with:

- A prioritized gap list (P0 / P1 / P2)

- Suggested workflow changes (copy-paste friendly)

- A “minimum viable secure pipeline” for your stack

What to share before the call:

- Link to public repo, or

- .github/workflows/*.yml (redact secrets/tokens)

- Optional: Dockerfile / deploy notes

Built from real pipelines I’ve shipped: Trivy → SBOM dashboard → auto-remediate PRs, CodeQL, Cosign, and cross-repo security automation (Nightingale / Nest).

You can check my work here - https://sbom.nightingale-security.com/