UNCLASSIFIED - NO CUI

vat work authored by runyontr's avatar runyontr
...@@ -19,7 +19,7 @@ When deploying a software factory, there are many hats/personas that interact wi ...@@ -19,7 +19,7 @@ When deploying a software factory, there are many hats/personas that interact wi
```mermaid ```mermaid
graph LR graph LR
subgraph cicd[Developer CICD] subgraph cicd[Developer CICD]
C[Code+VEX] --> Build C[Code+Justifications] --> Build
Build --> Scan Build --> Scan
Scan --> Check Scan --> Check
C --> Check[Check all Vulns have a justification] C --> Check[Check all Vulns have a justification]
...@@ -27,13 +27,13 @@ graph LR ...@@ -27,13 +27,13 @@ graph LR
end end
Upload --> OCIRegistry Upload --> OCIRegistry
Scan2 --> OCIRegistry S --> OCIRegistry
OCIRegistry --> B[System Vulnerabilities] OCIRegistry --> B[System Vulnerabilities]
B -->|Review/Accept by Security| B B -->|Review/Accept by Security| B
V --> B V --> B
subgraph infra[Infra CICD] subgraph infra[Infra CICD]
GitChanges[GitOps Changes + VEX] --> Scan2[Scan] GitChanges[GitOps Changes + Justifications] --> Scan2[Scan]
Scan2 --> S[Upload Image + VEX] Scan2 --> S[Upload Image + Vulns + Justifications]
S --> V[Validate Accepted Justifications] S --> V[Validate Accepted Justifications]
V --> Prod[Deploy to Environment] V --> Prod[Deploy to Environment]
end end
... ...
......