@@ -22,39 +22,39 @@ Production-grade, vetted GitHub Actions workflows for Kubernetes GitOps infrastr
2222
2323| Workflow | Description | Status |
2424| ----------| -------------| --------|
25- | [ ` docker/ build-push.yml ` ] ( workflows/docker/ build-push.yml ) | Build, scan, sign & push Docker images | ✅ Ready |
25+ | [ ` docker- build-push.yml ` ] ( .github/ workflows/docker- build-push.yml) | Build, scan, sign & push Docker images | ✅ Ready |
2626
2727### Security Workflows
2828
2929| Workflow | Description | Status |
3030| ----------| -------------| --------|
31- | [ ` security/ trivy-scan.yml` ] ( workflows/security /trivy-scan.yml) | Comprehensive vulnerability scanning | ✅ Ready |
32- | [ ` security/ gitleaks-scan.yml` ] ( workflows/security /gitleaks-scan.yml) | Secret detection and prevention | ✅ Ready |
33- | [ ` security/ sbom-generate.yml` ] ( workflows/security /sbom-generate.yml) | Generate Software Bill of Materials | ✅ Ready |
31+ | [ ` trivy-scan.yml ` ] ( .github/workflows /trivy-scan.yml) | Comprehensive vulnerability scanning | ✅ Ready |
32+ | [ ` gitleaks-scan.yml ` ] ( .github/workflows /gitleaks-scan.yml) | Secret detection and prevention | ✅ Ready |
33+ | [ ` sbom-generate.yml ` ] ( .github/workflows /sbom-generate.yml) | Generate Software Bill of Materials | ✅ Ready |
3434
3535### Kubernetes Workflows
3636
3737| Workflow | Description | Status |
3838| ----------| -------------| --------|
39- | [ ` kubernetes/ helm-lint.yml` ] ( workflows/kubernetes /helm-lint.yml) | Helm chart linting, validation & kubeconform | ✅ Ready |
40- | [ ` kubernetes/ helm-test.yml` ] ( workflows/kubernetes /helm-test.yml) | Helm unittest execution with JUnit reports | ✅ Ready |
41- | [ ` kubernetes/ helm-publish.yml` ] ( workflows/kubernetes /helm-publish.yml) | Package & publish charts to OCI registries | ✅ Ready |
42- | [ ` kubernetes/ kyverno-test.yml` ] ( workflows/kubernetes /kyverno-test.yml) | Kyverno policy testing with Chainsaw | ✅ Ready |
39+ | [ ` helm-lint.yml ` ] ( .github/workflows /helm-lint.yml) | Helm chart linting, validation & kubeconform | ✅ Ready |
40+ | [ ` helm-test.yml ` ] ( .github/workflows /helm-test.yml) | Helm unittest execution with JUnit reports | ✅ Ready |
41+ | [ ` helm-publish.yml ` ] ( .github/workflows /helm-publish.yml) | Package & publish charts to OCI registries | ✅ Ready |
42+ | [ ` kyverno-test.yml ` ] ( .github/workflows /kyverno-test.yml) | Kyverno policy testing with Chainsaw | ✅ Ready |
4343
4444### Infrastructure Workflows
4545
4646| Workflow | Description | Status |
4747| ----------| -------------| --------|
48- | [ ` terraform/ validate.yml ` ] ( workflows/terraform/ validate.yml ) | Terraform validation, formatting & security scanning | ✅ Ready |
49- | [ ` terraform/ plan.yml ` ] ( workflows/terraform/ plan.yml ) | Terraform plan with cost estimation & PR comments | ✅ Ready |
50- | [ ` terraform/ apply.yml ` ] ( workflows/terraform/ apply.yml ) | Terraform apply with state backup & approval gates | ✅ Ready |
48+ | [ ` terraform- validate.yml ` ] ( .github/ workflows/terraform- validate.yml) | Terraform validation, formatting & security scanning | ✅ Ready |
49+ | [ ` terraform- plan.yml ` ] ( .github/ workflows/terraform- plan.yml) | Terraform plan with cost estimation & PR comments | ✅ Ready |
50+ | [ ` terraform- apply.yml ` ] ( .github/ workflows/terraform- apply.yml) | Terraform apply with state backup & approval gates | ✅ Ready |
5151
5252### GitOps Workflows
5353
5454| Workflow | Description | Status |
5555| ----------| -------------| --------|
56- | [ ` gitops/ update-manifests.yml ` ] ( workflows/gitops/ update-manifests.yml ) | Update Kubernetes manifests (image tags, Helm values) | ✅ Ready |
57- | [ ` gitops/ argocd-sync.yml` ] ( workflows/gitops /argocd-sync.yml) | ArgoCD application sync with health checks | ✅ Ready |
56+ | [ ` gitops- update-manifests.yml ` ] ( .github/ workflows/gitops- update-manifests.yml) | Update Kubernetes manifests (image tags, Helm values) | ✅ Ready |
57+ | [ ` argocd-sync.yml ` ] ( .github/workflows /argocd-sync.yml) | ArgoCD application sync with health checks | ✅ Ready |
5858
5959### Composite Actions
6060
8686
8787jobs :
8888 build :
89- uses : samuelho-dev/git-flow/.github/workflows/docker/ build-push.yml@v1
89+ uses : samuelho-dev/git-flow/.github/workflows/docker- build-push.yml@v1
9090 with :
9191 context : .
9292 dockerfile : ./Dockerfile
@@ -103,14 +103,14 @@ jobs:
103103` ` ` yaml
104104jobs :
105105 scan-code :
106- uses : samuelho-dev/git-flow/.github/workflows/security/ trivy-scan.yml@v1
106+ uses : samuelho-dev/git-flow/.github/workflows/trivy-scan.yml@v1
107107 with :
108108 scan-type : fs
109109 scan-ref : .
110110 severity : HIGH,CRITICAL
111111
112112 scan-secrets :
113- uses : samuelho-dev/git-flow/.github/workflows/security/ gitleaks-scan.yml@v1
113+ uses : samuelho-dev/git-flow/.github/workflows/gitleaks-scan.yml@v1
114114 with :
115115 fail-on-findings : true
116116` ` `
@@ -120,7 +120,7 @@ jobs:
120120` ` ` yaml
121121jobs :
122122 sbom :
123- uses : samuelho-dev/git-flow/.github/workflows/security/ sbom-generate.yml@v1
123+ uses : samuelho-dev/git-flow/.github/workflows/sbom-generate.yml@v1
124124 with :
125125 target-type : directory
126126 target : .
@@ -185,7 +185,7 @@ Workflows never log secrets. Use GitHub Secrets or OIDC for authentication:
185185` ` ` yaml
186186jobs :
187187 build :
188- uses : samuelho-dev/git-flow/.github/workflows/docker/ build-push.yml@v1
188+ uses : samuelho-dev/git-flow/.github/workflows/docker- build-push.yml@v1
189189 secrets :
190190 registry-username : ${{ secrets.DOCKER_USERNAME }}
191191 registry-password : ${{ secrets.DOCKER_TOKEN }}
0 commit comments