Skip to content
  • Elusive — Security Diff for Pull Requests
d98c8bda-9049-4196-ac1b-d5b1126486fd

Project name

Elusive — Security Diff for Pull Requests​

Category

DevSecOps / Application Security

 

Project Overview

Elusive is a DevSecOps project designed to show how a software change affects the application’s security posture. Instead of displaying only code differences, it highlights security-relevant changes introduced by a pull request, such as modifications to authentication, exposed endpoints, dependencies, secrets, and application behaviour.

Challenge

Traditional pull-request reviews focus mainly on functionality and code quality. Security issues can remain hidden inside apparently small changes, while developers often receive disconnected results from multiple security tools without a clear explanation of what changed or why it matters.

Solution

The project combines automated security checks with a security-focused comparison of the application before and after a change. The pipeline includes static analysis, dependency scanning, secret detection, and practical demonstrations of security regressions such as removed authentication controls, unsafe logout behaviour, and unrestricted file uploads.

My Role

I contributed to the security analysis, technical documentation, vulnerability scenarios, DevSecOps workflow, and the design of practical demonstrations showing how code changes can alter the application’s attack surface.

Key Features

  • Security-focused pull-request analysis
  • SAST integration
  • Dependency scanning
  • Secret detection
  • Authentication regression detection
  • CSRF and upload-security scenarios
  • Before-and-after attack-surface comparison

Technologies

GitLab CI/CD · SAST · Dependency Scanning · Secret Detection · Secure SDLC

Source Code