43 lines
985 B
Markdown
43 lines
985 B
Markdown
# CI/CD Templates and Configuration
|
|
|
|
Reusable CI/CD templates and configuration for The Order.
|
|
|
|
## Structure
|
|
|
|
- `templates/` - Reusable CI/CD templates
|
|
- `scripts/` - CI/CD helper scripts
|
|
- `config/` - CI/CD configuration files
|
|
|
|
## Templates
|
|
|
|
- `ci-template.yml` - Base CI template
|
|
- `deploy-template.yml` - Deployment template
|
|
- `release-template.yml` - Release template
|
|
|
|
## Features
|
|
|
|
- Automated testing
|
|
- Security scanning (Trivy, Grype)
|
|
- SBOM generation (Syft)
|
|
- Image signing (Cosign)
|
|
- Deployment automation
|
|
- Release automation
|
|
|
|
## Usage
|
|
|
|
Copy templates to `.github/workflows/` and customize for your needs.
|
|
|
|
## Security
|
|
|
|
- All images are signed with Cosign
|
|
- SBOMs are generated for all artifacts
|
|
- Vulnerability scanning on every build
|
|
- Secrets are managed via GitHub Secrets or External Secrets
|
|
|
|
## Deployment
|
|
|
|
- Development: Automatic deployment on push to `develop`
|
|
- Staging: Automatic deployment on push to `main`
|
|
- Production: Manual approval required for deployment
|
|
|