CI/CD Pipelines

Build/test/deploy across GitHub Actions, GitLab, Jenkins, and progressive delivery.

  • 4 Tracked terms
  • Last 30 days Feed window

What this topic collects on

An article joins this feed when it matches these terms. Each one is also a search of its own.

Latest in CI/CD Pipelines


dev.to > baba_yaga_dee9f44c728109e > jenkins-vs-github-actions-complete-comparison-167p

Jenkins vs GitHub Actions: Complete Comparison

1+ day, 14+ hour ago   (212+ words) Jenkins, an open-source automation server, has been the de facto standard for CI/CD for over a decade. Born from the Hudson project, Jenkins has cultivated a massive community and an unparalleled ecosystem of plugins, making it incredibly versatile and…...


dev.to > stark_zhuang_df5076f35c68 > internet-exposed-jenkins-controllers-measuring-a-persistent-attack-surface-1po0

Internet-Exposed Jenkins Controllers: Measuring a Persistent Attack Surface

2+ day, 5+ hour ago   (359+ words) Jenkins is one of the most widely deployed automation servers in the world, and a meaningful share of those deployments are reachable from the public internet. That combination has produced a steady stream of serious vulnerabilities, including CVE-2024-23897, an arbitrary…...


dev.to > stark_zhuang_df5076f35c68 > hardening-jenkins-after-the-september-2026-plugin-advisory-a-practical-guide-2i52

Hardening Jenkins After the September 2026 Plugin Advisory: A Practical Guide

6+ day, 8+ hour ago   (729+ words) The Jenkins advisory of September 16, 2026 covers 20 plugin vulnerabilities, seven of which break the Script Security sandbox and yield code execution on the controller. The patches are available. What follows is the operational work around them: how to apply the fixes,…...


dev.to > omarmohelal > i-pointed-my-own-security-tool-at-my-own-github-action-it-found-two-bugs-4dia

I pointed my own security tool at my own GitHub Action. It found two bugs.

2+ week, 15+ hour ago   (864+ words) I write an application-security tool called SecHelix. Last week I added a GitHub Action to it. Before merging, I pointed the tool at its own new Action. It found two real defects. Neither would have failed a test. Both were…...