# devsecops

How to use JFrog Xray to scan Docker images, Maven JARs, and npm packages for CVEs and license violations — setting up security policies, watching repositories, and blocking builds with policy violations.

Harden Kubernetes clusters for production with RBAC, network policies, pod security standards, secrets management, and admission controllers.

Set up Trivy for container image vulnerability scanning — from local development to CI/CD pipeline integration with actionable remediation.

Integrate HashiCorp Vault with Kubernetes to eliminate static secrets from your cluster — with working manifests, threat models, and pipeline automation.