github-actions-cicd

Automate secure CI/CD pipelines by orchestrating GitHub Actions for testing, security scanning, performance audits, and deployment, while enforcing OIDC-based AWS authentication and least-privilege IAM roles.

Integrate CodeQL and ZAP security scanning into GitHub Actions by configuring workflow steps to initialize CodeQL analysis and perform ZAP baseline scans for automated vulnerability detection.

You can run Lighthouse performance audits in a GitHub Actions workflow by configuring Lighthouse CI steps to execute performance checks and enforce performance budgets.

Set up production deployment approvals in GitHub Actions by configuring environments with production gating and explicit approvals to control deployments to AWS with CloudFront invalidation.

This GitHub Actions CI/CD workflow supports OIDC-based AWS authentication, utilizing GitHub Secrets and least-privilege IAM roles to securely manage access without long-lived credentials.

GitHub Actions security scanning requires pinned action SHAs, minimized permissions, and Dependabot updates to maintain operational security and prevent supply chain vulnerabilities.