LV 1.1.4 — Auslieferung der Webanwendung (Continuous Delivery)
REQ-1.1.4-CD
Proof level: FUNCTIONAL STUB
Demonstrates
- ✓ CI on every push: production image build, Trivy scan (CRITICAL with available fix = fail, as in Anlage 1/2), SPDX SBOM artifact, image push to a registry (GHCR) on master
- ✓ Deploy to a live demo host with one command (make deploy: sync, build, up, migrate, seed, smoke test) at https://nnl-demo.stefanstretz.de
Mocked
- ◐ GHCR stands in for the contractor registry that the client's Harbor proxy-caches (LV 1.1.4); the demo host runs docker compose, not the client's Kubernetes platform
Pending external information
- ○ Client-side CD: Harbor pull secret, Argo CD / GitLab deployment config, namespace and Kyverno policies can only be exercised on the client's platform (Anlage 1)
- ○ Single Point of Contact address for Trivy scan reports (Anlage 1) - to be registered by the contractor
Technical documentation
docs/deployment.md