JWT-authenticated Flask REST API with full DevSecOps CI/CD pipeline (GitHub Actions, Bandit, Trivy). The project implements secure authentication using JWT tokens, SQLAlchemy ORM for database management, and an automated pipeline that runs static code analysis (Bandit) and container vulnerability scanning (Trivy) on every push. Built with security-first principles following OWASP best practices, this gateway demonstrates production-ready API development with integrated security testing at each stage of deployment.