FahamLah

Ship It ยท Part 2 ยท Kilang

CI/CD map

The central kitchen. Every recipe change is taste-tested and shipped by a conveyor belt.

Every world is open. C1 starts with a short Robots recap. Pass it and skip ahead.

Tip: best after Git & GitHub, World 7. Not a lock. Start any time.

World C1

Pipeline Thinking

Design a pipeline before you write any YAML.

9 lessons ยท 0 of 9 done

9 lessons
  1. Robots recap5 min
  2. CI, delivery or deployment?4 min
  3. Stations on the belt4 min
  4. Fast feedback and flaky tests4 min
  5. The testing pyramid3 min
  6. Build once, promote through environments4 min
  7. Trunk-based work and feature flags4 min
  8. DORA's five metrics4 min
  9. Same ideas in GitLab, Jenkins, Azure3 min
  10. Boss challenge: Draw the line

World C2

Container Pipelines

Capstone mission 2 comes after this world

Build, test, scan and publish images in GitHub Actions.

13 lessons ยท 0 of 14 done

13 lessons
  1. Build an image in Actions5 min
  2. Smart tags with metadata-action4 min
  3. Push to GHCR4 min
  4. Layer cache in CI4 min
  5. Multi-arch builds in CI3 min
  6. Run tests inside containers4 min
  7. Service containers: a test database4 min
  8. Compose in CI3 min
  9. Lint with hadolint and actionlint3 min
  10. Stop the line on critical CVEs4 min
  11. SBOM and provenance in CI4 min
  12. Reusable workflows and composite actions5 min
  13. Concurrency, path filters and caching4 min
  14. Capstone mission 2: Ship itMission 25 min
  15. Boss challenge: Green line

World C3

Release & Deploy

Capstone mission 3 comes after this world

Ship safely and undo fast.

11 lessons ยท 0 of 12 done

11 lessons
  1. Recreate, rolling, blue/green, canary5 min
  2. Deploy vs release: feature flags3 min
  3. Environments with required reviewers4 min
  4. Automatic versions and changelogs4 min
  5. A preview for every PR4 min
  6. Deploy to Cloudflare from Actions5 min
  7. Secrets per environment3 min
  8. OIDC: no long-lived keys4 min
  9. Database changes without downtime4 min
  10. Smoke tests and auto rollback4 min
  11. Quiet, useful alerts3 min
  12. Capstone mission 3: Release itMission 35 min
  13. Boss challenge: Bad Friday

World C4

Pipeline Shields

Keep your pipeline from becoming the way in.

9 lessons ยท 0 of 9 done

9 lessons
  1. Why pipelines are targets3 min
  2. The tj-actions story4 min
  3. Pin actions to a full SHA4 min
  4. Least-privilege permissions4 min
  5. pull_request_target and forks4 min
  6. Script injection4 min
  7. Secrets in logs3 min
  8. Self-hosted runner risks3 min
  9. SLSA levels and allow-lists4 min
  10. Boss challenge: Spot the holes