DevSecOpsWIP

PipelineForge

PipelineForge represents a full DevSecOps GitOps pipeline. It automates container builds, integrates Trivy for security vulnerability scanning, and manages deployments to Kubernetes. Key achievements include optimizing container images from 1.1GB to 8MB (99.3% reduction) using distroless multi-stage builds. The Kubernetes setup features HPA, NetworkPolicies, zero-downtime rolling updates, and was load-tested with k6 for 500 virtual users.

// Core Technologies

GitHub ActionsDockerKubernetesHelmTrivyk6

// Performance & Metrics

Size Reduction
99.3%
Load Test
500 VUs
Orchestration
K8s
Status
Implemented

// System Architecture

01

Optimization

Reduced container size by 99.3% (1.1GB to 8MB) using multi-stage distroless builds.

02

Security Gates

Integrated Trivy vulnerability scanning into the CI/CD deployment flow.

03

Kubernetes

Implemented NetworkPolicies, resource quotas, HPA, and readiness/liveness probes.

04

Validation

Validated zero-downtime rolling updates using k6 load testing with 500 virtual users.