Published Jun 6, 2023

SE Radio 567: Dave Cross on GitHub Actions

Dave Cross breaks down the power of GitHub Actions in automating CI/CD workflows, emphasizing best practices for secure management of secrets and permissions. By analyzing innovative use cases and comparing with traditional tools, he showcases how GitHub Actions can revolutionize software quality assurance and streamline development processes.
Episode Highlights
Software Engineering Radio - the podcast for professional software developers logo

Popular Clips

Episode Highlights

  • CI/CD Basics

    explains the fundamental concepts of Continuous Integration (CI) and Continuous Deployment (CD), emphasizing their role in automating project quality checks. CI involves automating tasks like running unit tests and linters to ensure code quality, while CD focuses on moving code into production seamlessly once it's validated 1. highlights the importance of having a robust test suite to facilitate code changes without breaking existing functionality 2.

    CI is all about automating the bits of your project, which mean that you can measure the quality of your project.

    ---

    This automation provides a safety net, allowing developers to confidently integrate and deploy code changes.

       

    Best Practices

    In discussing best practices for CI/CD, emphasizes the need for integrating unit tests within a CI framework as a foundational step 2. He suggests using tools like GitHub's Dependabot and CodeQL for static analysis to enhance project security and quality 1.

    Getting your unit tests running in some kind of CI framework is very useful.

    ---

    These practices ensure that code changes do not introduce new issues, maintaining the integrity of the software throughout its lifecycle.

Related Episodes