FahamLah

CI/CD commands

One page per command. What it does, when to use it, how risky it is.

Deploy and roll back (Cloudflare Wrangler)

Check images and workflows

  • hadolintProofreads a Dockerfile and lists risky lines, like a latest base image.Risk: Safe
  • actionlintProofreads GitHub Actions workflow files: typos, bad expressions, missing jobs.Risk: Safe
  • trivy imageScans an image for known holes (CVEs) in its packages.Risk: Safe
  • gh attestation verifyChecks the signed provenance of an image: which repo and workflow built it.Risk: Safe