https://github.com/vsingh55/devsecops-pipeline
DevSecOps Pipeline ensures secure, automated, and continuously monitored CI/CD processes on GCloud. It integrates security by design, leverages automation through Jenkins and Docker, and employs continuous monitoring with Prometheus and Grafana to maintain application and infrastructure health.
https://github.com/vsingh55/devsecops-pipeline
automation bash devsecops docker dockerhub gcp gmail graphana kubernetes prometheus security sonarqube terraform terraform-module trivy
Last synced: 7 months ago
JSON representation
DevSecOps Pipeline ensures secure, automated, and continuously monitored CI/CD processes on GCloud. It integrates security by design, leverages automation through Jenkins and Docker, and employs continuous monitoring with Prometheus and Grafana to maintain application and infrastructure health.
- Host: GitHub
- URL: https://github.com/vsingh55/devsecops-pipeline
- Owner: vsingh55
- License: mit
- Created: 2024-07-13T16:22:18.000Z (over 1 year ago)
- Default Branch: main
- Last Pushed: 2024-07-28T23:44:17.000Z (over 1 year ago)
- Last Synced: 2025-03-21T16:15:34.954Z (10 months ago)
- Topics: automation, bash, devsecops, docker, dockerhub, gcp, gmail, graphana, kubernetes, prometheus, security, sonarqube, terraform, terraform-module, trivy
- Language: HTML
- Homepage: https://vijaysingh.cloud/projects/202403-cicd/
- Size: 9.4 MB
- Stars: 1
- Watchers: 2
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# CI/CD with Built-in Security and Automation
A security-centric CI/CD pipeline integrating cutting-edge tools and practices to ensure robust code quality, vulnerability scanning, artifact publishing, secure Kubernetes deployment, and continuous monitoring.
## Introduction
This CI/CD pipeline is built on the principles of security, automation, and continuous monitoring to deliver a seamless and secure development and deployment experience.
- **Security by Design**: Security considerations are integrated into every stage of the development and deployment process.
- **Automation**: The pipeline leverages automation to enhance efficiency, security, and reduce human error.
- **Continuous Monitoring**: Systems and applications are continuously monitored to detect issues and anomalies promptly.
## Architecture
## Technologies Used
- **Kubernetes**: Container orchestration platform.
- **Jenkins**: CI/CD automation server.
- **SonarQube**: Code quality and static analysis.
- **Aqua Trivy**: Vulnerability scanning for code and container images.
- **Nexus Repository**: Artifact repository for secure storage.
- **Docker**: Containerization technology.
- **Docker Hub**: Docker image registry.
- **Kubeaudit**: Tool to audit Kubernetes clusters for various security concerns.
- **Grafana**: System and application-level monitoring and alerting.
- **Prometheus**: Collecting and querying metrics from services and endpoints.
- **Gmail**: Status notifications and alerts.
## Features:
## Project Structure
- **terraform/**: Terraform configuration files.
- **ModularizedTerraformInfra/**: Modular Terraform code for provisioning infra.
- **scripts/**: Deployment and automation scripts used with Terraform to automate and setup tools.
- **Jenkinsfile**: Declarative Jenkins pipeline definition.
## Workflow
### Development
- Developers create feature branches and push code to GitHub.
### CI/CD Pipeline Trigger
- Code changes trigger the Jenkins CI/CD pipeline.
### Build and Unit Testing
- [Build tool] compiles the code and executes unit tests.
### Code Quality and Security
- **SonarQube** performs code quality analysis.
- **Aqua Trivy** scans for vulnerabilities in code dependencies.
### Artifact Creation
- A build artifact (e.g., JAR, WAR) is generated.
### Artifact Publishing
- The artifact is pushed to Nexus Repository.
### Container Image Build
- Docker creates a container image using the artifact.
### Image Vulnerability Scan
- Aqua Trivy scans the image for vulnerabilities.
### Deployment
- If all checks pass, the image is deployed to Kubernetes.
### Monitoring and Notifications
- Monitoring solutions track system and website health.
- Emails are sent for deployment status and critical alerts.
## Screenshots
- Deployed Website
- Prometheus Target
- Grafana Dashboard
- Blackbox Exporter
- Notification Recieved
- Pipeline Build
- Sonarqube
- Docker Image
## **[Read the Blog Post here!](https://blogs.vijaysingh.cloud/project-devsecops-pipeline-pro)**
## Contribution
Contributions to this project are welcome! If you encounter any issues or have suggestions for improvement, feel free to open an issue or submit a pull request.
---