flowchart TD

subgraph SOURCE["Source Control"]
Developer[Developer]
GitHub[GitHub Repository]
end

subgraph CI["CI Pipeline"]
GithubActions[GitHub Actions]
AzurePipelines[Azure Pipelines]
end

subgraph SECURITY["Security Scanners"]
Semgrep[Semgrep - SAST]
Gitleaks[Gitleaks - Secrets]
KICS[KICS - IaC Security]
Trivy[Trivy / Grype - SCA]
Sonar[SonarQube - Code Quality]
end

subgraph BUILD["Container Build"]
DockerBuild[Docker Build]
SBOM[Syft - SBOM Generation]
end

subgraph REGISTRY["Container Registry"]
Registry[(Container Registry)]
end

subgraph SUPPLYCHAIN["Supply Chain Platforms"]
DepTrack[Dependency Track]
DefectDojo[DefectDojo]
end

subgraph GITOPS["GitOps Deployment"]
GitOpsRepo[GitOps Repository]
ImageUpdater[ArgoCD Image Updater]
ArgoCD[ArgoCD Controller]
Helm[Helm Charts]
end

subgraph KUBERNETES["Kubernetes Platform"]
Cluster[k8s Kubernetes Cluster]
end

subgraph OBSERVABILITY["Observability"]
Prometheus[Prometheus]
Grafana[Grafana]
Loki[Loki]
end

Developer --> GitHub

GitHub --> GithubActions
GitHub --> AzurePipelines

GithubActions --> Semgrep
GithubActions --> Gitleaks
GithubActions --> KICS
GithubActions --> Trivy
GithubActions --> Sonar

AzurePipelines --> Semgrep
AzurePipelines --> Gitleaks
AzurePipelines --> KICS
AzurePipelines --> Trivy
AzurePipelines --> Sonar

GithubActions --> DockerBuild
AzurePipelines --> DockerBuild

DockerBuild --> SBOM
DockerBuild --> Registry

SBOM --> DepTrack

Semgrep --> DefectDojo
Gitleaks --> DefectDojo
KICS --> DefectDojo
Trivy --> DefectDojo

GithubActions --> GitOpsRepo
AzurePipelines --> GitOpsRepo

Registry --> ImageUpdater
ImageUpdater --> GitOpsRepo

GitOpsRepo --> ArgoCD

ArgoCD --> Helm
Helm --> Cluster

Cluster --> Prometheus
Cluster --> Grafana
Cluster --> Loki