SecureDeploy

Overview

SecureDeploy is a full-stack DevSecOps security dashboard that scans public GitHub repositories for exposed secrets, Python SAST findings, dependency risks and Dockerfile misconfigurations using static analysis in an isolated clone.

Problem or Opportunity

Teams need a practical way to assess repository security without complex enterprise tooling, especially for smaller projects and early-stage products.

Proposed Solution

SecureDeploy provides severity-based findings, security scores, scan history and JSON/PDF exports through a React dashboard backed by FastAPI and SQLite.

Key Capabilities

• Secret detection in repository history
• Python static analysis with Bandit
• Dependency risk identification
• Dockerfile misconfiguration checks
• Severity-based prioritisation and security scoring
• Scan history with JSON and PDF export

Architecture and Workflow

FastAPI receives scan requests, clones repositories into isolated environments, runs modular scanners and persists results in SQLite. The React frontend visualises findings, trends and export options.

Security Considerations

• Isolated repository cloning for scan execution
• Static analysis only — no arbitrary code execution
• Clear separation between scan workers and API layer

Challenges and Decisions

• Prioritising findings without overwhelming users
• Designing exports useful for both developers and stakeholders
• Keeping scan performance acceptable for larger repositories