Tag
This blog post argues that GitHub Actions lacks static OIDC audience constraints, unlike GitLab CI/CD, and that this design weakness poses an increasing security risk as OIDC-based federation becomes more common.
A blog post from exe.dev cataloging their internal software factory: multiple AI agents for security review, alert investigation, log analysis, flaky tests, deploys, plus a custom CMS and self-healing UI tests.
swyx announces the alpha launch of Smol Forge, an agent-native git remote with built-in CI/CD, open to the first 100 users who make commits.
GitHub Actions and Pages are experiencing degraded availability, with workflow runs failing or delayed and some API requests returning errors. GitHub engineers are investigating and applying mitigations.
Kent C. Dodds shares an automation setup where Kody Koala exposes a Sentry webhook that triggers a Cursor AI cloud agent to investigate and fix errors, then merge, deploy, and verify in production.
A tweet suggests CI need not be a YAML nightmare, highlighting Cloudflare's new CI on Workflows that pairs with Artifacts storage and deployment.
An educational guide that breaks down each stage of a production deployment—builds, artifacts, database migrations, health checks, rolling updates, and rollbacks—and discusses when to use a PaaS versus running your own deployment infrastructure.
DanKornas announces Harness Open Source, an open source development platform featuring code hosting, automated DevOps pipelines, hosted development environments, and artifact registries.
freeCodeCamp announces a comprehensive course on software testing with Playwright, covering fundamentals like the testing pyramid, TDD, API testing, and AI-powered tools like KaneAI.
FreeCodeCamp published a full book teaching how to build a production-ready DevSecOps platform from homelab to AWS, covering Kubernetes, CI/CD, GitOps, security scanning, and observability.
This blog post argues that GitHub's collaboration paradigm (branches, pull requests, code reviews) is ill-suited for the modern AI-driven software development era where LLMs and agents generate code at high velocity, calling for rethinking of tools and workflows.
RCade is an arcade cabinet project from Recurse Center that pairs a real CRT with a custom USB-to-CRT graphics card and a CI/CD deployment system, making it easy to build, deploy, and share games.
This article argues that traditional CI fails for AI agents and proposes replacing it with a merge queue where all tests run before merging, allowing agents to fix issues before breaking the build.
This tutorial teaches how to build a production-ready Flutter CI/CD pipeline using GitHub Actions, including quality gates, Firebase and TestFlight distribution, and Sentry symbol uploads.
A user tweets about Sol, an AI that autonomously reviews PRs, makes fixes, pushes, and merges them within minutes, questioning if others are noticing this behavior.
DeepEval is an open-source Python framework for evaluating LLM applications, offering ready-made metrics, Pytest-style workflows, and CI/CD support.
A detailed walkthrough of setting up a self-hosted Forgejo instance as a GitHub replacement, covering the stack, CI/CD performance gains, and configuration.
Openship is an open-source, self-hostable deployment platform with built-in CI/CD, supporting any stack and offering features like SSL, CDN, backups, and mail server.
The author describes building an automated safety net for dailyprog.club's puzzle generation using an LLM (DeepSeek V4 Flash) and CI/CD, ensuring puzzles are generated and validated even when the author is unavailable.
The team behind OttoTester shares surprising insights from building an autonomous quality engineering system using specialized AI agents, emphasizing that orchestration and learning agents matter more than the execution agent or model quality.