CI-CD

Docker

Containers for every workload we ship — same image locally, in CI, and in production.

How we use it

Docker is how we package everything we build, whether it lands on Kubernetes, Cloud Run, or a single container host. Same image runs on a laptop, in CI, and in production — no "works on my machine" gap.

How we build images

  • Multi-stage builds — small production images, build tooling left behind
  • Non-root by default — least-privilege containers
  • Image scanning — vulnerabilities caught before deploy, not after
  • Registry — versioned, immutable tags — never latest in production

Our standards

If it runs in production, it runs the same way on a developer's machine. No manual server configuration that a Dockerfile could capture instead.

Related services

Using Docker in production?

Tell us what you run today. We will say whether Docker fits, what we would change, and what it would take — no deck.