Secure CI/CD Pipeline
PortfolioSourceGitHub Actions ↗
LIVE DEVSECOPS TELEMETRY

Secure CI/CD Pipeline Dashboard

Live status for Python testing, Bandit scanning, Terraform validation, immutable artifact packaging, and manually gated AWS deployment using GitHub OIDC.

Connecting to GitHub Actions…
Latest RunLoading…
Success Rate—
Average Duration—
Latest Commit—

Pipeline Stages

Test & Security ScanPython syntax, unit tests, Bandit
Waiting
Terraform Validatefmt, init, validate
Waiting
Package ArtifactImmutable ZIP tied to commit SHA
Waiting
AWS DeploymentManual OIDC-gated deployment
Manual

CI/CD Flow Chart

The implemented workflow separates automated validation and packaging from the manually gated AWS deployment job.

Secure CI/CD flow chart showing GitHub Actions testing, Bandit scanning, Terraform validation, immutable ZIP packaging, manual deployment approval, OIDC role assumption, and deployment to encrypted Amazon S3

AWS Architecture Diagram

The AWS view shows the current implementation: GitHub OIDC assumes a least-privilege IAM role and deploys the SHA-traceable artifact to a private, encrypted, versioned S3 bucket defined by Terraform.

Secure CI/CD AWS architecture showing GitHub Actions, GitHub OIDC, AWS IAM role, Terraform controls, and encrypted versioned Amazon S3 deployment bucket

Recent Workflow Runs

RunTriggerBranchResultCommit
Loading GitHub Actions…

This dashboard reads public GitHub Actions metadata. AWS deployment remains disabled unless the repository is configured with an approved AWS OIDC role and deployment bucket variables.

MICROSOFT AZURE REFERENCE ARCHITECTURE
Microsoft Azure reference architecture diagram for secure ci cd pipeline

Azure reference equivalent for portfolio comparison. The original project implementation remains as documented elsewhere on this page.