/tags/cicd/Recent content in Cicd on Gaurav.devHugoen-US© 2026 Gaurav. Built with care and clean code.Mon, 24 Aug 2026 00:00:00 +0000/posts/devops-pipeline-small-team/Mon, 24 Aug 2026 00:00:00 +0000/posts/devops-pipeline-small-team/<p>A good delivery pipeline makes the safe path the easy path. For a small team, it should also remain boring enough that anyone can diagnose it during a difficult release.</p> <h2 id="start-with-one-repeatable-path">Start with one repeatable path</h2> <p>Every change should run formatting, static analysis, unit tests, dependency checks, and a production build in clean infrastructure. Cache dependencies carefully, but never in a way that changes correctness. Pull requests should show the same checks that protect the main branch.</p>/posts/devsecops-without-slowing-delivery/Tue, 18 Aug 2026 00:00:00 +0000/posts/devsecops-without-slowing-delivery/<p>Security slows delivery when it arrives late, lacks context, or reports more noise than risk. DevSecOps works when teams receive useful feedback while a change is still cheap to fix.</p> <h2 id="define-what-matters">Define what matters</h2> <p>Begin with a lightweight threat model. Identify valuable assets, trust boundaries, likely abuse, third parties, and consequences. This gives scanning and review a purpose. A public marketing site and a healthcare workflow should not share the same controls or release gates.</p>