BUILDING A SOC 2 COMPLIANT GITOPS CI/CD PIPELINE WITH GITHUB ACTIONS

Summary from the TLDR InfoSec newsletter

This is a walkthrough for implementing a SOC 2-compliant GitOps workflow. The workflow features an app repo to test and build the code and an infra repo to deploy it. The walkthrough also presents hotfix and rollback flows.