All articles tagged with #cicd
Australian Federal Police arrested two men linked to TeamPCP for a nine‑month, global supply‑chain campaign that infected over 1,000 organizations by compromising CI/CD pipelines and downstream packages like Trivy; the suspects face multiple charges and potentially decades in prison if convicted, with investigators noting credential theft and a canister-based mechanism helping the malware persist.
GitHub reported a worldwide outage affecting web, API, Actions, Webhooks, Issues and Pull Requests, with about 20% error rates on web/API traffic and around 50% for archive and raw content downloads; Copilot and authentication services (SAML/OIDC, SCIM) were degraded as the company investigates a root cause and implements mitigations.
In the final part of their series on how Ars Technica is hosted in the cloud, the article discusses leftover configuration details, including their liveblogging system and authoritative DNS. They also explore the possibility of shifting their infrastructure to AWS's cloud-based 64-bit ARM service offerings, examining the potential benefits in terms of performance and costs. The article provides a recap of their current setup, which includes WordPress, WooCommerce, XenForo, and various other components, all running as containers in ECS tasks.
Ars Technica explains how they have adopted a CI/CD workflow to update code and integrate changes smoothly with their serverless cloud hosting. They emphasize the importance of version control in maintaining code and highlight the popularity of Git and GitHub in simplifying repository management. They also outline their process of branching, testing, and merging changes from GitHub into their deployed applications.