// Topics / CI/CD

CI/CD

12 entries tagged “CI/CD”

Container Image Scanning Without the Security Theater July 11, 2022 · 3 min Most container scanning setups produce hundreds of unread findings. Scan in CI, rescan the registry, gate admission, and triage by exploitability. containers security ci-cd

Zero-Downtime PostgreSQL Migrations Without the Drama February 21, 2022 · 6 min A single ALTER TABLE can ruin your weekend. How to migrate safely with expand-and-contract, batched backfills, and compatible deploys. databases ci-cd

Feature Flags at Scale: Ownership, Expiry, and Cleanup September 6, 2021 · 5 min 847 feature flags, about 200 with owners. Lessons from production codebases on flag types, ownership rules, fail modes, and cleanup. ci-cd devops go

DevSecOps in Practice: The Pipeline Controls I Implement April 19, 2021 · 7 min Pre-commit hooks, CI security stages, OPA Gatekeeper policies, and a triage system: the DevSecOps controls I set up so developers don't route around them. security devops ci-cd

GitOps and Canary Rollouts: No More Gambling on Deploys February 8, 2021 · 6 min How we wired Argo CD and Argo Rollouts together at my infrastructure startup: canary steps, Prometheus analysis gates, repo layout, and what still goes wrong. ci-cd kubernetes

Supply Chain Security After SolarWinds: Where to Start January 11, 2021 · 8 min After SolarWinds: how I map build paths, harden CI, pin and proxy dependencies, sign artifacts, and watch for tampering in enterprise pipelines. security ci-cd

GitHub Actions in Production: Matrix, Caching, Secrets July 20, 2020 · 6 min Matrix builds, dependency caching, gated deploys, and the security gotchas I hit building a startup's CI/CD pipeline on GitHub Actions. ci-cd devops

Zero-Downtime Deployments: Migrations, Probes, and Habits October 21, 2019 · 5 min Zero-downtime deploys depend less on tooling than on expand-and-contract migrations, backward-compatible code, readiness probes, and graceful shutdown. ci-cd devops kubernetes

Testing in Production: Why Staging Misses the Real Bugs June 3, 2019 · 5 min Staging misses the bugs that matter. How I test in production safely: feature flags, 1% rollouts, canaries, shadow traffic, and synthetic checks. testing production ci-cd

GitOps with Flux and Argo CD: Stop Deploying From a Laptop February 11, 2019 · 9 min How to move a team off ad-hoc kubectl deploys to Git-driven Kubernetes with Flux and Argo CD: repo layout, secrets, rollbacks, and my mistakes. ci-cd devops kubernetes

Security Automation in CI: Stop Reviewing by Hand July 17, 2017 · 4 min Manual security review can't keep up with continuous delivery. How I moved secret scanning, dependency audits, SAST, and DAST into a fintech CI pipeline. security devops ci-cd

Continuous Deployment Without the Chaos June 6, 2016 · 5 min Continuous deployment is a discipline problem. How we ship a mobility startup's backend many times a day: trusted tests, small changes, fast rollback. ci-cd devops engineering