Security by Design reference: JWT/mTLS auth, RBAC, DevSecOps pipeline (SAST/DAST/SBOM/Cosign), Kubernetes hardening. Production-grade patterns.

A zero-config, cross-platform security suite orchestrating Trivy, Semgrep, Gitleaks, and ZAP. Runs locally or as a drop-in GitHub Action to block vulnerabilities before merge.