Continuously Update Everything
summary
Claims a reproducible pipeline that scans Git repositories to auto-discover components (Docker images, Go libs, Helm charts), extracts version metadata, and triggers updates only when policy conditions match (patch-only, latest-tag, supported release line). Uses automated PRs plus CI to validate changes and requires scheduled maintenance windows to avoid bitrot. Demonstrates that starting updates earlier reduces migration cost, and that vulnerability risk often comes from a single outdated component identified as fast as possible.
AI-written summary · about
related talks
38mAutomate or Stagnate: Surviving the Era of Continuous Updates
33mAutomated update management with
40mSecure by Default: Building an AI-Augmented, OSS-Powered Reusable CI/CD Pipeline
45mHow to Automate Dependency Updates with the Renovate@Roche Bot
15mManaging Third Party Software in your GitOps Setups
43mContinuous Deployment: The GitOps, The Pipelines, and The Ugly
46mRethinking Continuous Delivery
31mContinuous Security – integrating security into your pipelines