Fix broken CI and IaC, add GitOps delivery, sample app and architecture docs - #3

Open

Mpurushotham wants to merge 14 commits into

mainfrom

fix/devsecops-platform-hardening

Commits on Jul 28, 2026

Fix Terraform IaC: syntax errors, networking, and apply-blocking bugs
Mpurushotham
committed
9cbbf5a
Fix CI: repair four failing jobs and remove pipeline duplication
Mpurushotham
committed
a58ab1e
Complete Helm chart and clear all CRITICAL/HIGH IaC findings
Mpurushotham
committed
b44912e
Add ArgoCD module and GitOps app-of-apps delivery
Mpurushotham
committed
6577cb2
Vendor AWS retail store sample app and document the platform
Mpurushotham
committed
0acd449
Configure AWS Labs MCP servers, read-only
Mpurushotham
committed
9dd2858
Fix an unpassable scan gate and clear 7 fixable CVEs
Mpurushotham
committed
224e6d5
Fix two action refs that do not exist upstream
Mpurushotham
committed
964ec0b
Fix tflint findings and scope linting to first-party Terraform
Mpurushotham
committed
d266a8a
Skip AWS-dependent CI jobs cleanly when the account is not bootstrapped
Mpurushotham
committed
e657328
Remove an AdministratorAccess remediation role and clear Checkov
Mpurushotham
committed
0d94260
Fix shell injection in deploy workflows and pin all actions by SHA
Mpurushotham
committed
65d2913
Record the supply-chain and branch-protection decisions
Mpurushotham
committed
9bd2325

Commits on Jul 30, 2026

Make the AWS preflight verify the role, not just the secret
Mpurushotham
committed
048bc28