Bibek Kumar Sah
Software Engineer • Kathmandu
Back to Projects
DevOps & Cloud• Production Verified

DevOps Automation & SCM Modernization

End-to-end migration from SVN to self-hosted GitLab with Jenkins CI/CD and SonarQube quality enforcement.

Timeline: 2024 - 2025
Organization: Version Systems Pvt. Ltd.
Live System

Key Verified Outcomes

+40% Boost
Release Efficiency
100% CI/CD
Build Automation
SonarQube
Code Quality Gate

Live System Walkthrough & Demonstration

Visual walkthrough of core application features, system architecture, and performance.

2:10 min CI/CD pipeline
0:00
3:00

The Architectural Challenge

Led the end-to-end migration from traditional SVN to a self-hosted GitLab server. Configured Jenkins pipelines and integrated SonarQube for static code analysis, improving release workflow efficiency by 40%.

Engineering Execution & Deep Dive

Transitioning a development team from centralized SVN to modern Git required both cultural leadership and technical precision. We preserved complete revision history, set up branch protection rules, containerized build environments with Docker, and introduced automated SonarQube quality gates that caught potential bugs before deployment.

Core Technical Features:

  • Zero-loss history migration from legacy SVN repositories to self-hosted GitLab.
  • Automated Jenkins CI/CD pipelines executing builds, unit tests, and security scans on push.
  • SonarQube static analysis gates blocking merges on security vulnerabilities or code smells.
  • Automated end-to-end test execution with Playwright.

Security Hardening & VAPT

  • ✦Centralized secrets management in CI/CD preventing API keys from entering source code.
  • ✦Automated vulnerability scanning on third-party dependencies in the pipeline.
  • ✦Strict branch protection requiring passing checks and peer review approvals.

Technology Stack

GitLab CI/CDJenkinsDockerSonarQubePlaywrightSVNLinux Bash
Engineering Governance
This project follows strict code review guidelines, automated static code analysis, and regression verification before production deployment.