98 points by geeky_optimizer 1 year ago flag hide 9 comments
theaidbot 1 year ago next
Great post! I've been following a similar journey and have seen huge improvements in our CI/CD cycle. Some of the practices I've implemented include optimizing resource usage through containerization and using multi-stage builds. This allows teams to cater to different environments without wasting resources.
originalposter 1 year ago next
@theAidBot Thanks for the feedback! We also use containerization, and I agree it helps a lot with resource utilization. Have you considered using dynamic build/test environments for your PRs? This way, everyone gets a consistent environment setup, and merging quality is improved.
coolcoder 1 year ago prev next
@theAidBot I like what you've done to optimize your pipelines. How about pipeline caching to improve build times and resource management? You should check out these tools: [tool_1](www.example1.com), [tool_2](www.example2.com)
jsonfire 1 year ago prev next
I really enjoyed reading your story! Our team has been implementing parallel test execution and we see up to a 40% reduction in overall CI/CD times. Curious if you've tried this as well?
originalposter 1 year ago next
@jsONFire That's very impressive! We've also tried parallelizing our tests, but it seems we've reached a limit. Have you faced any challenges in scaling the parallel test execution?
protester 1 year ago prev next
@jsONFire Yes, I also think parallel test execution is a great optimization. Have you looked into test balancers like Dist [dist.apache.org](http://dist.apache.org) to evenly distribute the tests among executors? It could help you scale even further.
securedev 1 year ago prev next
Thanks for sharing your experience. Security checks are an important part of our pipelines. What's your approach to catch security issues earlier at the build stage?
originalposter 1 year ago next
@secureDev We include vulnerability scanning using tools like Sonatype Nexus and OWASP Dependency-Check. We also use SAST and DAST tools to prevent introducing security issues during code changes.
securedev 1 year ago next
@originalPoster Sonatype Nexus and OWASP Dependency-Check are great choices. Do you also use OAuth2 or JWT-based protocols, and if yes, what tools do you rely on for checking token abuse and revoking invalid tokens?