CcrimsondhaksSep 2 · 6 min readPinning GitHub Actions to a SHA is not protectionIn March 2025 an attacker compromised tj-actions/changed-files and rewrote its release tags to point at malicious code. The injected code dumped runner memory into workflow logs, which on a public rephelgafinn.hashnode.dev
DDevStackHubAug 30 · 3 min readGitHub Actions CI/CD: 5 Proven Strategies for Fast Production WorkflowsOriginally published at DevStackHub — Read the complete deep dive with advanced matrix builds and multi-cloud deployment examples. Slow continuous integration pipelines bottleneck developer velocity,devstackhub-tech.hashnode.dev
AAmaresh PelletiAug 27 · 1 min readGitHub Actions Self-Hosted Runners: Fix Before Sept 25Originally published on DevToolHub. GitHub has enforced the 2.329.0 minimum for data-residency orgs since July 31, and brownouts for everyone else on github.com are running now ahead of September 25.devtoolhub.hashnode.dev
SSourabh PandeJun 22 · 5 min readBeginners' Guide to CI/CD: How Automation Saved My Weekends Introduction Picture this: It's 6:00 PM on a Friday. You've just finished coding a highly anticipated feature for your app. You manually run the tests on your machine—everything passes. You carefully saurabh532.hashnode.dev
BBeautero KENNEJun 17 · 3 min readHow to Orchestrate Conflict-Free Dual Automatic Deployment with Vercel and GitHub Pages using GitHub ActionsHere is how you can set up a modern CI/CD (Continuous Integration / Continuous Deployment) pipeline capable of automatically deploying a frontend web application to two distinct production environmentbopsbeautero.hashnode.dev
Sshafiu usmanJun 4 · 4 min readBuilding a Production-Ready Django Deployment Pipeline with Docker and GitHub ActionsIntroduction Part 1 of the AfiyaVest DevOps Deployment Series Deploying a Django application to production is much more than running docker compose up. A production deployment should be reliable, repesumyelwa.hashnode.dev
IIgor GanapolskyJun 1 · 4 min readYou automated away the human approval step in CI/CD. You didn't replace what it was doing. It's 3am and your pipeline just approved a deployment The autonomous overnight loop is no longer a thought experiment. It's documented, productized, and in production: The loop pattern — pick task, imai-agent-blog-12345.hashnode.dev
AAnusha KothaMay 31 · 7 min readMastering Artifact Management, Build Binaries, and Storage Repositories1. Introduction In our previous guide, we took a massive leap forward by building our very first automated CI/CD simulation script. We watched our pipeline run tests, check security health, and packagdevopslearnershub.hashnode.dev
Ssanjay yadavMay 15 · 3 min readDocker Image Re-Tagging in AWS ECR Gets Inefficient Faster Than Most Teams ExpectIntroduction Docker CLI is the standard tool for container image management, but it has one major limitation when it comes to re-tagging images in remote registries. It requires you to pull an image ldevopsbysanjay.hashnode.dev
PPrasad Suman Mohan Apr 12 · 3 min readDay 14 - Kserve Implementation for Intent Classifier ModelIntroduction Deploying ML models into production is where real challenges begin. In this guide, we’ll walk through a complete end-to-end deployment of an Intent Classification model using KServe— wiprasadsuman.hashnode.dev