PParas·1d agoYour CI/CD Pipeline Is the Easiest Way Into Your Repo (And Nobody's Checking It)Your code gets reviewed. Your dependencies get scanned. But your CI/CD pipeline — the thing with access to your secrets, your deployments, and your production credentials — usually gets copy-pasted fr4 min read·parasraju.hashnode.dev
NNoah Grinstein·3d agoArgo CD vs Flux in 2026: How to Structure GitOps for Environments, Apps, and Clusters, and Roll Out Changes SafelyArgo CD and Flux are the two CNCF-graduated GitOps tools for Kubernetes. Argo CD suits teams that want a built-in UI, ApplicationSets for managing...15 min read·controlplane-eng.hashnode.dev
NNoah Grinstein·3d agoHow to Automate App Deployment: Container Builds, Infrastructure as Code, CI/CD, and GitOps (A Reference Stack)Automate deployment by building a versioned container image on every commit, defining infrastructure and environments as code, letting a CI...16 min read·controlplane-eng.hashnode.dev
Ccrimsondhaks·Sep 2Pinning GitHub Actions to a SHA is not protectionIn March 2025 an attacker compromised tj-actions/changed-files and rewrote its release tags to point at malicious code. The injected code dumped runner memory into workflow logs, which on a public rep6 min read·helgafinn.hashnode.dev
DDevStackHub·Aug 30GitHub Actions CI/CD: 5 Proven Strategies for Fast Production WorkflowsOriginally published at DevStackHub — Read the complete deep dive with advanced matrix builds and multi-cloud deployment examples. Slow continuous integration pipelines bottleneck developer velocity,3 min read·devstackhub-tech.hashnode.dev
AAmaresh Pelleti·Aug 27GitHub Actions Self-Hosted Runners: Fix Before Sept 25Originally published on DevToolHub. GitHub has enforced the 2.329.0 minimum for data-residency orgs since July 31, and brownouts for everyone else on github.com are running now ahead of September 25.1 min read·devtoolhub.hashnode.dev
SSourabh Pande·Jun 22Beginners' Guide to CI/CD: How Automation Saved My Weekends Beginners' Guide to CI/CD: How Automation Saved My Weekends5 min read·saurabh532.hashnode.dev
BBeautero KENNE·Jun 17How to Orchestrate Conflict-Free Dual Automatic Deployment with Vercel and GitHub Pages using GitHub ActionsHere is how you can set up a modern CI/CD (Continuous Integration / Continuous Deployment) pipeline capable of automatically deploying a frontend web application to two distinct production environment3 min read·bopsbeautero.hashnode.dev
Sshafiu usman·Jun 4Building a Production-Ready Django Deployment Pipeline with Docker and GitHub ActionsBuild a Django CI/CD pipeline on a VPS. Uses GitHub Actions, Docker, NGINX, Postgres, Redis & Celery to move from cloud to self-hosted.4 min read·sumyelwa.hashnode.dev
IIgor Ganapolsky·Jun 1You automated away the human approval step in CI/CD. You didn't replace what it was doing. Agents now open PRs, approve low-risk deploys, and run overnight loops with no one watching. Sandboxing bounds what they can reach; RBAC bounds their credentials. Neither bounds what they're allowed to do within reach at 3am. Here's the deterministic control-plane bound that does — and how it composes with the isolation you already run.4 min read·ai-agent-blog-12345.hashnode.dev
