Avoid Chaos in Our CI/CD Pipelines with Inner Source
summary
The talk examines insecure and unmaintainable CI/CD pipelines that leak secrets, include unknown third‑party components, and duplicate divergent pipeline code across projects. It proposes using Inner Source—shared pipeline templates and actions in GitLab/GitHub/Jenkins/CircleCI—rolled out iteratively with usage metrics and allocated maintenance time, and reports major audit effort reductions (e.g., 1,000 projects audited in minutes) and availability of a free pipeline scanner.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 2:10Inner Source and CI/CD
- 9:10CI/CD pipeline chaos
- 12:18Inner Source for pipelines
- 18:29Practical Inner Source
- 21:59Inner Source benefits
- 26:13Q&A
- 35:22Conclusion
related talks
16mTime for a Check-Up of Your CI/CD Pipelines!
33mAre your Pipelines Secure? Lock-down unsecured CI/CD Pipelines
38mSecuring your CI/CD Pipeline
33mScale your CI/CD setup for Cloud Native Microservices via InnerSource
40mSecure by Default: Building an AI-Augmented, OSS-Powered Reusable CI/CD Pipeline
33mCI/CD Agility and Controlling Pipeline Sprawl Outline
01h 00mContinuous Integration and Delivery - from the trenches
15mThe Raiders of the Lost CICD and the quest for the Innersource Grail