DevOps & Cloud Projects Showcase

DevOps Project-39: Secure CI/CD Pipeline on Local Ubuntu Using Jenkins, SonarQube & Trivy (100% Free)

This project demonstrates the design and implementation of a secure, end-to-end CI/CD pipeline using open-source DevSecOps tools, all running locally on a single Ubuntu server. The pipeline is fully containerized using Docker and Docker Compose, with Jenkins orchestrating automation, SonarQube performing static code analysis, and Trivy scanning container images and dependencies for vulnerabilities. The entire setup operates without cloud services or paid tools, providing a cost-free yet production-style DevSecOps learning environment.

DevSecOps

CI/CD

Jenkins

SonarQube

Trivy

Docker

Docker Compose

Ubuntu

Open Source

Security

Containerization

Pipeline as Code