Automated verification.
WHAT IT DOES
Runs checks automatically on every change.
WHAT TO RUN
Build Formatting check Linting and static analysis Tests Dependency vulnerability scan
WHAT TO ENFORCE
That all of them pass before a change is merged.
WHY
A check that can be skipped is eventually skipped.
WHAT TO KEEP FAST
The pipeline.
WHY
A slow pipeline is worked around.
WHAT TO DO ABOUT SLOWNESS
Cache dependencies Run independent checks in parallel Run slow tests separately, less often
WHAT TO MAKE VISIBLE
Failures, immediately, to whoever caused them.
WHAT TO NEVER ALLOW
A permanently failing pipeline.
WHY
It trains everyone to ignore failures.
WHAT TO ADD BEYOND CHECKS
Building a deployable artefact Publishing it, on release
WHAT TO PROTECT
Credentials used by the pipeline, stored as secrets rather than in configuration.
WHAT TO REVIEW
What the pipeline actually verifies, periodically.
