A robust CI/CD pipeline is the foundation of modern development.
Build¶
- ☐ Deterministic build (lockfiles)
- ☐ Caching dependencies
- ☐ Docker image build
- ☐ Artifact versioning (git SHA)
Test¶
- ☐ Unit tests
- ☐ Integration tests
- ☐ E2E tests (selectively)
- ☐ Linting and formatting check
- ☐ Type checking
Security¶
- ☐ Dependency vulnerability scan
- ☐ Container image scan
- ☐ SAST (static analysis)
- ☐ Secret scanning (git-secrets, truffleHog)
Deploy¶
- ☐ Automatic staging deploy
- ☐ Production deploy with approval
- ☐ Canary/rolling strategy
- ☐ Automated rollback
- ☐ Smoke tests after deploy
Monitoring¶
- ☐ Deploy event in monitoring tool
- ☐ Error rate alerting
- ☐ Performance regression detection
- ☐ Deployment frequency tracking
Metrics¶
Measure DORA metrics: deployment frequency, lead time, MTTR, change failure rate.
ci/cddevopsautomation