The security checks in every Lionshead PR

Security, DevOps & Infrastructure, Software Development(lionshead.digital)view on HackerNews
CI/CDsecurityTrivyGitleaksCheckovOWASP ZAPDevOpsinfrastructuresoftware development

Author: earnestamateur

Date: 7/13/2026

Article Summary:
The author describes a comprehensive security stack used in their CI/CD pipeline to catch vulnerabilities, secrets, and license issues in their codebase, including tools like Trivy, Gitleaks, Checkov, and OWASP ZAP.