google cloud

This repository demonstrates how to implement a secure CI/CD pipeline using GitLab and Google Cloud Platform, focusing on:

🔐 Workload Identity Federation for secure authentication 📦 Artifact Registry for container images 🛡️ Binary Authorization for image signing 🔍 Vulnerability scanning 🚀 Progressive delivery with Cloud Deploy

Reporting for MIT Club of Northern California

A demo on how to use Workload Identity on GCP to call Google Cloud API from an application deployed on GKE

Google Cloud Shift-left security demonstration containing infrastructure, continuous delivery pipeline and tooling to support security from within a build pipeline