// Topics / CI/CD

CI/CD

    Container Scanning Without the Security Theater Most container scanning setups generate noise, not security. Here is how to build a pipeline that actually catches what matters. containers security ci-cd Zero-Downtime Database Migrations Without the Drama A single ALTER TABLE can ruin your weekend. How to migrate safely with expand-and-contract, batched backfills, and compatible deploys. databases ci-cd Feature Flags at Scale: What Nobody Warns You About Feature flags are great until you have 847 of them and nobody knows which ones are safe to remove. Practical lessons from Decloud and enterprise teams. ci-cd devops go DevSecOps in Practice: What I Actually Implement The concrete pipeline configs, policy-as-code patterns, and runtime controls I set up to bake security into delivery. security devops ci-cd GitOps + Progressive Delivery: How We Stopped Gambling on Deploys How we wired GitOps and canary rollouts together at Decloud, and why the combination changed how I think about deployments. ci-cd kubernetes Your Software Supply Chain Is Probably a Mess What SolarWinds taught us about supply chain security, and the concrete steps I've been implementing at enterprise scale. security ci-cd The GitHub Actions Patterns I Actually Use in Production Matrix builds, dependency caching, gated deploys, and the security gotchas I hit building Decloud's CI/CD pipeline on GitHub Actions. ci-cd devops Zero Downtime Deploys Are a Team Habit, Not a Tool Every team says they want zero downtime. Few want to do the boring work that actually gets them there. Here's what that boring work looks like. ci-cd devops kubernetes Your Staging Environment Is Lying to You Staging never catches the real bugs. Here's how I learned to test in production without burning everything down. testing production ci-cd GitOps: Stop SSHing Into Production How I moved three teams off ad-hoc kubectl deployments and onto Git-driven infrastructure -- with code examples, repo layouts, and the mistakes I made along the way. ci-cd devops kubernetes Stop Doing Security Reviews by Hand Your manual security gate is a bottleneck pretending to be a process. Here's how I moved security checks into the pipeline at the fintech startup. security devops ci-cd Continuous Deployment Without the Chaos Continuous deployment is a discipline problem, not a tooling problem. We deploy a mobility startup's backend dozens of times a day because we built habits first. ci-cd devops engineering