secure-cicd

Secure CI/CD pipeline This repository contains Terraform modules and example configurations to enable Google Cloud customers to quickly deploy a secure CI/CD pipeline, implementing many of the functions outlined in the Shifting Left on Security report. The Terraform modules in this repository provide an opinionated architecture that incorporates and documents best practices for secure application delivery architecture. Tagline Create a CI/CD pipeline that follows security best practices. Detailed Set up a secure CI/CD pipeline that follows best practices for building, scanning, storing, and deploying containers to GKE. You can choose whether to deploy your solution through the console directly or download as Terraform from GitHub to deploy later. Architecture 1. A developer pushes new code