the_order/infra/cicd

CI/CD Templates and Configuration

Reusable CI/CD templates and configuration for The Order.

Structure

• templates/ - Reusable CI/CD templates
• scripts/ - CI/CD helper scripts
• config/ - CI/CD configuration files

Templates

• ci-template.yml - Base CI template
• deploy-template.yml - Deployment template
• release-template.yml - Release template

Features

• Automated testing
• Security scanning (Trivy, Grype)
• SBOM generation (Syft)
• Image signing (Cosign)
• Deployment automation
• Release automation

Usage

Copy templates to .github/workflows/ and customize for your needs.

Security

• All images are signed with Cosign
• SBOMs are generated for all artifacts
• Vulnerability scanning on every build
• Secrets are managed via GitHub Secrets or External Secrets

Deployment

• Development: Automatic deployment on push to develop
• Staging: Automatic deployment on push to main
• Production: Manual approval required for deployment