Please enable JavaScript.
Coggle requires JavaScript to display documents.
Dev ops, Task, Products, Deployment steps, Deployment checklist - Coggle…
Dev ops
Security & DevSecOps
Static scan (SAST): SonarQube, CodeQL
Dependency scan (SCA): Snyk, OWASP
Secrets scanning: Gitleaks, TruffleHog
IaC scanning: tfsec, Checkov
Container scan: Trivy, Anchore
-
-
-
-
-
-
-
Deployment steps
Deploy
ECS
- Register new task definition với new image, env updated
- Stop old task definition (task running)
- Rew new task definition
Compute
EC2
- Pull code
- Docker restart / down-up
-
-
Chuẩn bị ENV (can skip)
- ECS: define trong cicd/_task_definition.json
(Configuration của database hoặc dùng chung
sẽ được define trong secret manager)
- EC2, Lightsail: .env
-
-