Skip to content
View gabrielldn's full-sized avatar
:shipit:
I may be slow to respond.
:shipit:
I may be slow to respond.

Organizations

@desenvolvimentodeticpcce @programa-it-talent @pcce-redes @baiaotech

Block or report gabrielldn

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don't include any personal information such as legal names or email addresses. Markdown supported. This note will be visible to only you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
gabrielldn/README.md

Hi 👋, I'm Gael Lopes

DevOps Tech Lead • DevSecOps • Platform Engineering • GitOps • CI/CD Security • Observability

Typing SVG

Visitor count 👇

visitor count

📌 Pinned Projects

GitHub action-generated pinned repositories

🔗 End-to-End Platform Story

The core repos are now connected as one production-like narrative:

  • secure-gitops-platform
    GitOps governance, policy-as-code, SBOM/scan/sign/attest supply chain, and Argo Rollouts canary gates.
  • java-api-with-otlp-sdk
    Instrumented Java workload (OTel + Prometheus metrics) deployed by GitOps with progressive rollout analysis.
  • postgres-ha-chaos-lab
    HA Postgres backend (Patroni/etcd/HAProxy + chaos scenarios) consumed by the Java workload.

Flow: code -> secure CI/release -> signed digest deploy -> canary analysis/rollback -> HA database evidence.

😊 About Me

coding gif

  • 🔭 DevOps Tech Lead (Public Sector | Ceará, BR) — Platform Engineering, GitOps, and CI/CD Security (SAST/SCA/DAST/IAST).
  • 🔐 Hands-on DevSecOps — quality gates, supply chain security (SBOM + signing), secrets management, and hardening.
  • 🚀 Release engineering — blue/green, canary, and fast rollback (Kubernetes / Docker / Swarm).
  • 📈 Observability — OpenTelemetry + metrics/logs/traces with actionable dashboards and alerts.
  • ⚙️ IaC & automation — Terraform/OpenTofu, Ansible, and Bash for reproducible and secure infrastructure.
  • 💬 Let's talk about DevOps/DevSecOps/GitOps/Full Cycle.
  • ✍️ I write on Medium about technology, DevSecOps, and security.

🔐 Security & Quality Gates (DevSecOps)

SAST - SonarQube SCA - Snyk SCA - Dependabot SCA - OWASP Dependency-Check Container Scan - Trivy DAST - OWASP ZAP IAST - Burp Suite SBOM - CycloneDX SBOM - Syft Signing - Cosign Secrets - Vault Runtime - Falco

🔨 Languages and Tools

AWS Azure DigitalOcean Ansible Terraform Vagrant Jenkins ArgoCD GitHub Actions GitLab CI/CD Kubernetes Docker Podman Prometheus Grafana Python Go Java JavaScript Bash PostgreSQL MySQL MongoDB Redis Apache Kafka Linux Debian Ubuntu Nginx Git

📊 GitHub Stats

GitHub action-generated metrics GitHub action-generated languages metrics
GitHub action-generated highlights GitHub action-generated achievements detailed

Pinned Loading

  1. gh-summary gh-summary Public

    GitHub CLI extension that summarizes coding activity by day or range, including commits, additions, deletions, total lines, characters, contributions, JSON output, and repo breakdown.

    Shell 1

  2. secure-gitops-platform secure-gitops-platform Public

    Production-like DevSecOps platform on local Kubernetes (k3d, 3 clusters): GitOps, progressive delivery, policy-as-code, secure supply chain, Vault/ESO secrets, Step-CA PKI, and SLO-driven observabi…

    Shell

  3. java-api-with-otlp-sdk java-api-with-otlp-sdk Public

    It provides CRUD operations for user management, follows a layered architecture (Controller-Service-Repository), and uses JPA/Hibernate with an in-memory H2 database. Additionally, it automatically…

    Java

  4. postgres-ha-chaos-lab postgres-ha-chaos-lab Public

    Lab production-like de HA/DR/Chaos para PostgreSQL 17 com Patroni, etcd, HAProxy, pgBackRest e MinIO, com evidências práticas de failover, quorum safety, lag e PITR.

    Shell