Convert Jenkins CI/CD pipelines to GitHub Actions workflows #3
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Convert Jenkins CI/CD pipelines to GitHub Actions workflows
Summary
This PR completely migrates the existing Jenkins-based CI/CD system to GitHub Actions workflows while maintaining full feature parity. The migration includes:
Jenkinsfilewith.github/workflows/ci.ymlcontaining 10 stages including security scanning (Trivy, OWASP), code quality (SonarQube), and Docker operationsGitOps/Jenkinsfilewith.github/workflows/cd.ymlfor GitOps deployment with Kubernetes manifest updates and email notificationslegacy/jenkins/directory for reference.github/SECRETS.mdThe GitHub Actions workflows provide equivalent functionality to the original Jenkins pipelines with improved integration to GitHub's native CI/CD platform.
Review & Testing Checklist for Human
.github/SECRETS.md(Docker Hub, SonarQube, email SMTP credentials)gh workflow run ci.yml --ref DevOps -f docker_tag=test-v1.0kubernetes/bankapp-deployment.ymlNotes
The CD workflow modifies and commits to the DevOps branch directly - ensure this doesn't conflict with any branch protection rules.
Link to Devin run: https://app.devin.ai/sessions/deb656576f2b4c039973f44c3901fa47
Requested by: Stephen Cornwell (@stephencornwell)