CI-CD

GitHub Actions

CI/CD on every merge — build, test, and deploy with rollback ready.

How we use it

GitHub Actions runs our default pipelines: build, test, and deploy on every merge to main, with rollback ready if something slips through. Kept close to the code it ships, so pipeline changes get the same PR review as application code.

What a pipeline usually covers

  • Test and lint — on every push, before anything merges
  • Build and scan — Docker images built and scanned for vulnerabilities
  • Deploy — to Kubernetes, Cloud Run, or the target platform on merge to main
  • Rollback — a known-good previous build is always one step away

Our standards

Failing builds do not ship. Secrets live in Actions secrets or a proper secrets manager, never in the workflow file. Deploys are logged and traceable back to the commit that triggered them.

Related services

Using GitHub Actions in production?

Tell us what you run today. We will say whether GitHub Actions fits, what we would change, and what it would take — no deck.