CI/CD 规范:测试、lint、发布与供应链安全
评估一条 CI/CD 流水线的质量,应依据三项客观标准:结果产出速度、结果可信度,以及流水线被攻破后的损失范围。前两项决定开发者是否信任流水线反馈:产出缓慢或偶发误报的流水线会被反复重跑直至通过,日志不再有人阅读。第三项决定仓库在单个被投毒的 action 事件中的暴露程度。
10 min read
Loading…
Loading…
Quote of the day · October 26 · 关于意义 · Rick and Morty
Nobody exists on purpose. Nobody belongs anywhere. Everybody's gonna die. Come watch TV?
Notes on Agent runtimes — design decisions laid open: why it is this way, what it costs, and when it stops being true.