CI/CD Pipelines
Concrete, runnable patterns for production GitHub Actions pipelines. Every snippet below is self-contained: copy it, swap the placeholders, and ship. Action versions are current as of July 2026; pin by SHA in regulated/high-trust repos (see Supply-Chain Baseline). For sibling depth on container internals see docker-production; for cloud IAM specifics see aws-production-deploy.
Safety gate
Before executing commands or changing external systems, confirm scope, credentials, target environment, rollback, and required approval. Pin and verify third-party artifacts; never expose secrets to client code or logs.
Reference guide
Read only the references needed for the current request:
- Action Version Matrix (July 2026): references/action-version-matrix-july-2026.md
- GitHub Actions — Core CI Workflow: references/github-actions-core-ci-workflow.md
- Caching Strategies: references/caching-strategies.md
- Secrets & OIDC: references/secrets-oidc.md
- Docker Multi-Stage Build: references/docker-multi-stage-build.md
- Deployment Strategies: references/deployment-strategies.md
- Environment Promotion (dev → staging → prod): references/environment-promotion-dev-staging-prod.md
- Release Automation: references/release-automation.md
- Monorepo: build/test only what changed: references/monorepo-build-test-only-what-changed.md
- Rollback Procedures: references/rollback-procedures.md
- Supply-Chain Baseline (2026): references/supply-chain-baseline-2026.md
- Status Badges: references/status-badges.md
- CI Performance Tips: references/ci-performance-tips.md
- Copy-Paste Starter Workflows: references/copy-paste-starter-workflows.md