v0.1.0 - Initial Stable Release

Munitor v0.1.0 - Initial Stable Release

The first stable release of the Munitor CircleCI orb (kof22/munitor@0.1.0), a complete CI/CD pipeline generator for KofTwentyTwo projects.

Pipeline Types

Seven pipeline types, each generating full CircleCI workflows from a single .munitor.yml config file:

• java-webapp - Maven-based Java web applications with Docker packaging
• node-api - Node.js API services (Express, Fastify, etc.)
• node-webapp - Node.js web applications with auto-generated distroless Dockerfiles
• terraform - Terraform/OpenTofu infrastructure with security scanning
• validate-cd-repo - GitOps CD repository validation (Kustomize + Helm)
• sdk-distribution - SDK/library publishing (npm)
• argocd-apps - ArgoCD app-of-apps repositories with environment-based directory validation

Features

Build & Test

• Java builds with configurable JDK version via cimg/openjdk executor
• Node.js builds with configurable package manager (npm/yarn/pnpm)
• Automatic version calculation via GitVersion
• GIT_COMMIT_SHA build arg passed to Docker builds for runtime traceability

Security & Quality

• Trivy container image scanning with binary and DB caching
• OWASP Dependency-Check with toggle for teams affected by NVD H2 bug
• Gitleaks secrets scanning
• Semgrep SAST scanning (conditional)
• SonarQube integration (conditional)
• JaCoCo code coverage enforcement
• ESLint/Prettier for Node.js projects
• tfsec/kube-linter/kubesec for Terraform and Kubernetes manifests

Docker & Deployment

• Docker build, scan, and push to GHCR
• Auto-generated distroless Dockerfiles for node-webapp
• CD repository updates (Helm values.yaml and Kustomize kustomization.yaml)
• Health check with PostgreSQL sidecar validation

Workflow Structure

• snapshot (develop/feature branches) - full quality pipeline
• release-candidate (release/* branches) - QA-gated pipeline
• production (main) - fast-path promotion
• lint-pack (all branches) - orb validation

Configuration

Minimal .munitor.yml example:

pipeline_type: java-webapp
java_version: "21"
app_name: my-app
cd:
  repo: KofTwentyTwo/My-App-CD
contexts:
  registry: ghcr

Stats

• 31 files, 749 insertions
• 362+ test assertions passing
• 71 orb commands, 5 executors, 28 jobs