- GitHub (Code)
- Docker (Containerization)
- Jenkins (CI)
- OWASP (Dependency check)
- SonarQube (Quality)
- Trivy (Filesystem Scan)
- ArgoCD (CD)
- Redis (Caching)
- AWS EKS (Kubernetes)
- Helm (Monitoring using grafana and prometheus)
- Developers push code to GitHub →Webhook Triggers Jenkins CI/CD pipeline.
- CI Pipeline:
- OWASP dependency check.
- SonarQube static code analysis.
- Trivy container vulnerability scanning.
- Docker image build & push to registry.
3.CD Pipeline:
- Updates deployment manifests in GitHub.
- ArgoCD deploys the updated application to Kubernetes.
- Monitoring & Notifications:
- Prometheus & Grafana monitor system performance.
- Jenkins sends email notifications on deployment success or failure