Automated testing, container scanning, and zero-downtime deployment pipelines using GitHub Actions and ArgoCD.
1. GitHub Actions Workflow Configuration
Every pull request executes automated unit testing, TypeScript typechecking, SonarQube static security analysis, and Docker container vulnerability scans.
yamlvarixen-cli
name: Enterprise Production Deploy
on:
push:
branches: [ main ]
jobs:
test-and-build:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- name: Run Typecheck & ESLint
run: npm run typecheck && npm run lint
- name: Build & Push Container Image
run: docker build -t registry.varixen.io/app:${{ github.sha }} .2. GitOps Git-Sync with ArgoCD
ArgoCD monitors the Kubernetes manifest repository, performing progressive canary deployments with automatic rollback if error rates spike.