DEV Community

#cicd

CI/CD pipelines and automation

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
GhostAction āļāļĨāļąāļšāļĄāļēāļ­āļĩāļāļĢāļ­āļš: āđ€āļĄāļ·āđˆāļ­ workflow āļŠāļ·āđˆāļ­ "security-audit" āļ„āļ·āļ­āļ•āļąāļ§āļ‚āđ‚āļĄāļĒ secret āđāļĨāļ°āļŠāļīāđˆāļ‡āļ—āļĩāđˆāļ—āļĩāļĄ DevSecOps āļ„āļ§āļĢāđ€āļŠāđ‡āļ„āđ€āļ”āļĩāđ‹āļĒāļ§āļ™āļĩāđ‰

GhostAction āļāļĨāļąāļšāļĄāļēāļ­āļĩāļāļĢāļ­āļš: āđ€āļĄāļ·āđˆāļ­ workflow āļŠāļ·āđˆāļ­ "security-audit" āļ„āļ·āļ­āļ•āļąāļ§āļ‚āđ‚āļĄāļĒ secret āđāļĨāļ°āļŠāļīāđˆāļ‡āļ—āļĩāđˆāļ—āļĩāļĄ DevSecOps āļ„āļ§āļĢāđ€āļŠāđ‡āļ„āđ€āļ”āļĩāđ‹āļĒāļ§āļ™āļĩāđ‰

Comments 1
2 min read
CI vs CD: Passing Tests Is Only Part of Shipping Software

CI vs CD: Passing Tests Is Only Part of Shipping Software

Comments
2 min read
CI Email Tests Need a Run Manifest

CI Email Tests Need a Run Manifest

Comments
4 min read
Myth FAQ: What My Clean Draft Run Still Hides

Myth FAQ: What My Clean Draft Run Still Hides

Comments
8 min read
CI Secrets Are Empty in Fork Pull Requests: The Safe Patterns That Actually Work

CI Secrets Are Empty in Fork Pull Requests: The Safe Patterns That Actually Work

Comments 1
7 min read
Refuse the Rerun Until the Fixture Manifest Still Matches

Refuse the Rerun Until the Fixture Manifest Still Matches

Comments
7 min read
FAQ: A Side Session Is Not a Pipeline Receipt

FAQ: A Side Session Is Not a Pipeline Receipt

Comments
7 min read
Navigating GitLab CI/CD on Forks: Lessons from Real Contributions

Navigating GitLab CI/CD on Forks: Lessons from Real Contributions

Comments
4 min read
Did the Agent Compile Your Pipeline, or Just Read It?

Did the Agent Compile Your Pipeline, or Just Read It?

1
Comments
8 min read
Domain, Assertions, Fixture Hash: Gate Agent Patches on Strength

Domain, Assertions, Fixture Hash: Gate Agent Patches on Strength

Comments
9 min read
The runner fleet that scales to zero

The runner fleet that scales to zero

Comments
5 min read
FAQ: A Model Patch Is Not a GitLab Review

FAQ: A Model Patch Is Not a GitLab Review

Comments
8 min read
Which tests would you cut when the bill arrives?

Which tests would you cut when the bill arrives?

Comments 1
5 min read
FAQ: A Suggested Job Is Not a Pipeline Contract

FAQ: A Suggested Job Is Not a Pipeline Contract

Comments
7 min read
The npm Worm Era: Why Package Signatures Did Not Stop Shai-Hulud

The npm Worm Era: Why Package Signatures Did Not Stop Shai-Hulud

Comments
3 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.