Mounting /var/run/docker.sock into a container to let it build images is equivalent to giving that container root on the host, and it is presented in most CI documentation…
Lint failures arriving from CI ten minutes after a push are a context switch for something a machine could have fixed before the commit existed — and a…
Passing a private repository token as a build argument puts it in the image history, where docker history will read it back out for anyone with the image.…
Caching Composer or npm downloads previously meant a layer holding the cache directory, which bloats the image and is invalidated whenever anything above it changes. The cache lives…
3.0 arrived in September and can produce one file containing the application, its dependencies and the runtime — which changes what deployment means compared with a PHP release…
A twelve-minute pipeline that reports a lint failure at minute eleven trains people to push and switch tasks, which is the opposite of what CI is for. Ordering…
Caching the installed directories means a stale cache silently ships the wrong dependency versions; caching the package manager’s download cache does not. Keying on the lock files means…