tomevault-io CI/CD Pipeline Builder
Status: ✅ Research complete Last validated: 2025-11-08 Confidence: 🟡 Medium — Research-backed playbook – audit monthly
How to use this skill
- Review modules/core-guidance.md to triage pipeline goals and constraints.
- Design the backbone with modules/pipeline-foundations.md.
- Apply reliability and metrics practices from modules/quality-gates-and-observability.md.
- Bake in supply-chain and compliance controls via modules/security-and-compliance.md.
- Revisit modules/known-gaps.md and schedule the refresh workflow in modules/research-checklist.md.
Module overview
- Core guidance — stakeholder alignment, platform selection, maturity map.
- Pipeline foundations — architecture patterns, environment strategy, deployment choreography.
- Quality gates & observability — testing matrices, DORA metrics, release telemetry.
- Security & compliance — SLSA levels, SBOM, policy-as-code, audit prep.
- Known gaps — targeted investigations and roadmap items.
- Research checklist — monthly refresh cadence.
Research status
- Guidance reconciled with 2024–2025 DORA findings, SLSA v1.0, and major CI platform releases.
- Next audit scheduled for 2026-01-31 or sooner if SLSA 1.1 or GitHub/GitLab major changes land.
- Known gaps capture platform-specific deep dives (e.g., Jenkins Evergreen strategy) still pending validation.
Converted and distributed by TomeVault — claim your Tome and manage your conversions.