CG
← Back to projects

HR Interview Automation System

FastAPIPostgreSQLDockerGitHub ActionsTrivyGHCR

The Challenge

Shipping a backend service manually is error-prone and doesn't catch security issues before they reach production. I wanted a pipeline where every change was automatically validated, built, scanned, and published without manual steps.

My Approach

I built the backend with FastAPI and PostgreSQL, adding request validation, rate limiting, and structured logging, then containerized it with Docker. A GitHub Actions workflow builds the image, runs a Trivy vulnerability scan against it, and only publishes to GHCR if the scan passes.

Outcome

Every commit to the main branch produces a validated, scanned, versioned container image automatically, which is then deployed to a live service on Render — no manual builds, and known vulnerabilities are caught before an image ever ships.

View on GitHub →