Engineering zero-drift cloud platforms & declarative GitOps.

apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: retail-store-app
  namespace: argocd
spec:
  project: default
  source:
    repoURL: 'https://github.com/imayanks/retail-store-sample-app.git'
    targetRevision: HEAD
    path: charts/retail-store
    helm:
      valueFiles:
        - values-production.yaml
  destination:
    server: 'https://kubernetes.default.svc'
    namespace: production
  syncPolicy:
    automated:
      prune: true
      selfHeal: true

stage('Quality & Security Gate') {
    parallel {
        stage('SonarQube Analysis') {
            steps {
                withSonarQubeEnv('SonarServer') {
                    sh 'sonar-scanner -Dsonar.projectKey=tetris-devsecops'
                }
            }
        }
        stage('OWASP Dependency Check') {
            steps {
                dependencyCheck additionalArguments: '--scan ./ --format XML'
            }
        }
    }
}
stage('Trivy Image Scan') {
    steps {
        sh 'trivy image --exit-code 1 --severity CRITICAL ecr.aws/tetris:${BUILD_NUMBER}'
    }
}

services:
  temporal:
    image: temporalio/auto-setup:1.24.2
    environment:
      - DB=postgresql
      - POSTGRES_USER=temporal
      - POSTGRES_PWD=temporal
    ports:
      - "7233:7233"
  api-worker:
    build: .
    command: python -m app.workers.click_tracker
    environment:
      - TEMPORAL_HOST=temporal:7233
      - DATABASE_URL=postgresql+asyncpg://user:pass@db/prod