Trigger
Understand push, pull_request, workflow_dispatch and scheduled events.
DevOps module 02
Design pipelines that fail safely.
A pipeline is a controlled delivery system—not a list of shell commands.
Permissions
Grant the minimum contents, packages, pages and identity-token permissions required.
Build
Install reproducibly, compile, test and fail fast before packaging.
Security
Scan dependencies, secrets, code and container images before deployment.
Artifact
Upload an immutable build once and promote the same artifact between environments.
Deploy
Use protected environments, approvals, concurrency controls and clear rollback procedures.
Review questions
Why did the workflow run?
Identify the exact event, branch filters and path filters.
What can it modify?
Read permissions and environment protection before trusting a workflow.
How do we roll back?
Promote versioned artifacts and retain the previous known-good release.