A pull-based deploy: CI signs a webhook, an agent on the server pulls the new image and redeploys. Plus the 401 that was never about the signature.
Topic
ci
4 articles in this topic.
-
-
Green on my machine, red in CI, same image. The bug was a single permission bit on /tmp, and the real fault was a test running the container in a shape it never ships in.
-
A pre-commit hook that formats your code before it reaches the pipeline. No husky, no lint-staged, fifteen lines of shell.
-
A pipeline that lints, tests, scans and ships the image on every push, plus the monthly rebuild that stops a pinned base from rotting in silence.