Lewati ke konten

Development, Security, and Operations (DevSecOps) Tooling

PT Cloud Platform Indonesia (PT CPI) mengoperasionalkan Development, Security, and Operations (DevSecOps) modern—bukan hanya lisensi scanning, melainkan pola delivery yang konsisten dari infrastruktur hingga aplikasi.

Infrastructure as Code (IaC) & platform

Terraform, OpenTofu, Crossplane, Kubernetes (K8s), dan Cloudflare Edge Network—dengan review, scanning, dan promotion antar environment.

Git-based Operations (GitOps)

Argo CD dan Flux CD untuk deployment declarative, drift detection, dan progressive delivery di cluster.

Secure Software Development Life Cycle (SDLC)

Snyk, GitLab, dan GitHub—SAST, SCA, container/Infrastructure as Code (IaC) scanning, policy gate, Software Bill of Materials (SBOM), dan audit trail di pull request.

Aplikasi modern

Go, Rust, TypeScript + Effect; framework Astro, SolidJS, Huma + Chi, Axum, Hono, Elysia; runtime Bun; data layer Redis, PostgreSQL, Typesense.

  • Infrastructure as code dengan gate di CI—Terraform/OpenTofu/Crossplane tidak merge tanpa review dan scan
  • Git-based Operations (GitOps) sebagai single source of truth untuk workload di K8s
  • Security checks di PR (shift-left), bukan hanya di production
  • Observability (metrics, logs, traces) sebagai bagian dari definition of done