GitOps CI/CD Pipeline
End-to-end GitOps delivery pipeline with GitHub Actions, ArgoCD, automated security scanning, and Cosign image signing. Zero-touch deployments from commit to production.
- Deploy Time
- 8 min
- Time Saved
- 82%
- CVEs in Prod
- 0
- Daily Deploys
- 25+
Deploy Time
Time Saved
CVEs in Prod
Daily Deploys
Project Overview
Built a complete GitOps-based delivery pipeline for a microservices application. GitHub Actions handles CI: build, test, SAST with Trivy, image push to ECR, and Helm chart version bump via automated PR. ArgoCD continuously syncs the cluster state to the Git repository, enabling full audit trails and one-click rollbacks. Deployment gates include automated integration tests, Cosign image signing, and Slack approval workflows for production environments. Every production change is traceable to a pull request approved by two engineers.
Key Achievements
- Reduced deployment time from 45 minutes to under 8 minutes end-to-end
- Zero critical CVEs reach production — SAST and container scanning mandatory gate
- Full audit trail: every production change linked to a PR with mandatory 2-reviewer approval
- Automated rollback triggers on Prometheus SLO breach alerts