Learn how to automate your home lab using Terraform, Ansible, Packer & GitLab CI/CD for consistent, version-controlled, and scalable infrastructure.
Dagger is a portable devkit for CI/CD pipelines, developed by the creators of Docker. It enables DevOps engineers to build and run powerful pipelines anywhere by providing a composable, reusable software components system. Powered by Buildkit, Dagger aims to solve the fragmentation problem in DevOps by unifying development and CI environments, facilitating local testing and debugging, and avoiding CI lock-in. Dagger runs on any Docker-compatible runtime, solving dev/CI drift and CI lock-in, and it's in early stages of development with active community participation encouraged.
The article presents ten lesser-known but highly useful GitHub Actions that can enhance workflow automation, focusing on tasks like YAML validation, markdown link checking, auto-assignment of PRs, commit message linting, dependency caching, Slack notifications, license compliance checking, PR size labeling, security scanning, and Jira integration.
The Cloud Native Computing Foundation (CNCF) announces the expansion of OpenTelemetry into CI/CD observability, enabling standardized and vendor-agnostic monitoring of CI/CD pipelines.
GitLab introduces CI/CD Steps, a new programming language designed for simplifying complex DevSecOps automation workflows.
Conor Barber explores the evolution of infrastructure from YAML configurations to pipelines-as-code, focusing on modern CI/CD systems like GitHub Actions, GitLab, and CircleCI. The presentation was given at QCon San Francisco 2023, discussing how moving away from YAML can improve scalability, cost efficiency, and developer experience.
Research shows that GitHub Actions, a popular CI/CD platform, is vulnerable to typosquatting attacks, where malicious actors exploit spelling mistakes in action names to trick developers into running malicious code.