Recent posts tagged cicd

Pipelines de CI/CD são frequentemente tratados como simples mecanismos de automação: executam testes, compilam aplicações, geram artefatos e realizam deploys. Entretanto, eles também representam uma das superfícies de ataque mais importantes de um am...

Most teams think of Flyway only when they need to manage ongoing database schema changes. But what if your project already has a complete, stable schema and you’re only now introducing version control? Or what if you want to incorporate your schema i...

Context Every time a new client was onboarded, their web application had to be deployed and exposed to the internet. As part of the deployment, the infrastructure required several configuration steps across different services before the applicatio...

GitHub Actions doesn't natively support dynamically populated dropdown options for workflowdispatch inputs. This can become a maintenance headache, especially when managing multiple packages in an npm monorepo. I came across a clever workaround shar...

In conventional software development, the boundary between success and failure is binary, deterministic, and unambiguous. You write a discrete function, formulate a unit test with assert calculatediscount100, 0.2 == 80, and when your continuous integ...

New to Bitrise CodePush? Here's What I Wish I Knew Before Setting It Up If you've never used CodePush before, the idea sounds almost too convenient. You find a bug in a React Native app, fix the JavaScript, and instead of waiting for another App S...

One of the most perplexing discussions I've had in recent times was about CI/CD. I've earned my CI/CD scout badge at this stage in my career, so the confusion caught me off guard. This post briefly sets out what Continuous Integration CI and Continuo...

A small copy change and a database migration probably shouldn't go through exactly the same release process. Yet in many teams, they do. Both need the same approvals. Both follow the same checklist. Both wait for the same people, regardless of what...

An end-to-end test fails. The report is red. Someone asks, “Is it a bug?” Maybe. But at that moment, all we really know is that the test didn't observe the expected behavior. That distinction sounds small, but it changed the way I investigate fa...

What is a Canary Release? A canary release is a modern software deployment strategy where a newly developed version of an application is rolled out to a tiny fraction of real users before making it available to the entire user base. This technique ...

The pipeline is green. QA signed off. The deployment window is open. Someone asks: “Are we good to release?” And then something interesting happens. Everyone looks at someone else. The developer knows the code. QA knows what was tested. DevO...

There is a statistic from Gartner that every data team knows and most prefer to ignore: 87% of Machine Learning and AI projects never make it to production. They remain trapped in "prototype limbo": a Jupyter notebook on a data scientist's laptop boa...

Your Tests Passed. That Still Doesn’t Mean You Should Release. A green test suite feels reassuring. Unit tests pass. Integration tests pass. End-to-end tests pass. CI is green. At that point, releasing can feel like the obvious next step. But the...

!Image descriptionhttps://dev-to-uploads.s3.us-east-2.amazonaws.com/uploads/articles/jkbnem9ae2wkqfe61is8.png A green CI pipeline is a nice feeling. The build passed. Tests are green. Linting is clean. Nothing obvious is on fire. For a few seconds,...

In the previous episode, we talked about different service design approaches/blog/continuous-delivery-office-hours-e4. This time, we dive deeper into database changes. Even for teams that can effortlessly deploy their application code, database chan...

You scan your application code. You scan your dependencies. You scan your containers. You have never scanned the thing that has access to all of them. Your CI pipeline holds your deploy keys. Your registry credentials. Your cloud tokens. Your signi...

Forms passing in staging does not mean the site is fast enough to publish. A short checklist for speed budgets on priority URLs, CI checks, production previews, and what to measure after deploy. On Thursday the team closed the last functional ticket...

A follow-up. The previous article described what we are building. This one describes how it works in practice - and why the shift from academic tool to industrial platform matters. In a previous article, I described the architecture of a protocol a...

One of the harder questions to answer at scale is how to ship without a few seconds where your users are getting timeouts or your fleet is split across two image versions. Kubernetes’s default rolling update strategy gradually deploys new pods and r...

Performance budget gates in GitHub Actions are free until someone owns twelve client workflows, Chrome drift, and client reporting. How agencies split Lighthouse CI from managed PageSpeed monitoring. The Slack thread started with a screenshot of a g...