// Topics / CI/CD

CI/CD

Definition

CI/CD coverage in this archive spans 6 posts from Jun 2016 to Jul 2022 and focuses on reliability, delivery speed, and cost discipline as one system, not three separate concerns. The strongest adjacent threads are devops, security, and devsecops. Recurring title motifs include without, security, production, and stop.

Key claims

  • Most posts prioritize predictable operations over feature breadth or stack novelty.
  • Early posts lean on stop and continuous, while newer posts lean on github and actions as constraints shifted.
  • This topic repeatedly intersects with devops, security, and devsecops, so design choices here rarely stand alone.

Practical checklist

  • Set SLOs first, then choose tooling that keeps deploy, observability, and rollback simple.
  • Start with the newest post to calibrate current constraints, then backtrack to older entries for first principles.
  • When boundary questions appear, cross-read devops and security before committing implementation details.

Failure modes

  • Adding platform layers faster than the team can operate and debug them.
  • Chasing throughput gains without proving they improve end-user reliability.
  • Applying guidance from 2016 to 2022 without revisiting assumptions as context changed.

Suggested reading path

References

6 entries tagged “CI/CD”

    Container Scanning Without the Security Theater · 4 min Most container scanning setups generate noise, not security. Here is how to build a pipeline that actually catches what matters. containers security docker DevSecOps in Practice: What I Actually Implement · 7 min The concrete pipeline configs, policy-as-code patterns, and runtime controls I set up to bake security into delivery. devsecops security devops The GitHub Actions Patterns I Actually Use in Production · 7 min Matrix builds, dependency caching, gated deploys, and the security gotchas I hit building Decloud's CI/CD pipeline on GitHub Actions. github-actions ci-cd devops GitOps: Stop SSHing Into Production · 9 min How I moved three teams off ad-hoc kubectl deployments and onto Git-driven infrastructure -- with code examples, repo layouts, and the mistakes I made along the way. gitops devops kubernetes Stop Doing Security Reviews by Hand · 5 min Your manual security gate is a bottleneck pretending to be a process. Here's how I moved security checks into the pipeline at the fintech startup so we could ship fast without shipping stupid. security devops devsecops Continuous Deployment Without the Chaos · 6 min Continuous deployment is not a tooling problem. It is a discipline problem. We deploy the Dropbyke backend dozens of times a day because we built habits first and automation second. continuous-deployment devops ci-cd
All topics →