Top Summary
FlaskFort is a secure notes API with multi-user authentication, strict ownership enforcement, and a DevSecOps pipeline that blocks risky releases. It demonstrates backend engineering with security gates, release automation, and reproducible containers.
10+ endpoints
Security scans: 3
Release: GHCR + SBOM
Tests: auth + ownership
Architecture
Client → API → Postgres with JWT-protected routes and ownership enforcement.
API Surface
- Auth: register, login
- Notes: CRUD with ownership enforcement
- Health: service health check
- AI: local LLM assist endpoint
Security Gates
- gitleaks blocks secret leaks
- pip-audit blocks High/Critical dependency issues
- trivy blocks CRITICAL container vulnerabilities
CI/CD
- ruff + pytest quality gates
- Docker build with versioned tags
- Release artifacts pushed to GHCR
Testing
- Auth flows (register/login) validated
- Ownership tests on every notes route
Images
Entry point for auth and API usage with clear status and navigation.
Strict ownership enforced across notes CRUD with clear, minimal UI.