Timeline for Is CI/CD a myth
Current License: CC BY-SA 4.0
27 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Nov 18 at 4:19 | history | protected | gnat | ||
| Nov 17 at 13:03 | answer | added | Michael Shaw | timeline score: 1 | |
| Nov 12 at 11:37 | comment | added | DannyNiu | @JacobisonCodidact I was browsing through software project management methodologies, and these terms came up feeling alienating. CD/CI happens to be the #1 I want to grasp. | |
| Nov 11 at 14:16 | comment | added | Jacob is on Codidact | What do you mean when you say "CI/CD"? How do you think it's related to Scrum? Why do you think it can't be used together with code review (etc.)? | |
| Nov 10 at 23:54 | answer | added | Flater | timeline score: 1 | |
| Nov 10 at 4:54 | comment | added | candied_orange | 0-days are never found CI/CD because what gets found in CI/CD never gets released and never becomes a 0-day. The 0-days are the bugs you find when they make the news. | |
| Nov 10 at 4:53 | history | became hot network question | |||
| Nov 10 at 4:44 | answer | added | candied_orange | timeline score: -3 | |
| Nov 9 at 15:44 | answer | added | Thomas Owens♦ | timeline score: 6 | |
| Nov 9 at 15:12 | comment | added | Thomas Owens♦ | @DannyNiu This gives me enough information to give an answer. | |
| Nov 9 at 14:30 | history | edited | DannyNiu | CC BY-SA 4.0 |
added 104 characters in body
|
| Nov 9 at 14:29 | comment | added | DannyNiu | 0-days are never found in CI/CD or any kind of testing. The essence of my second point is to express my doubt on any exaggeration of benefit offered by CI/CD over security. | |
| Nov 9 at 14:11 | comment | added | Thomas Owens♦ | @DannyNiu That isn't a security feature. A zero day is a vulnerability that has been found (and sometimes exploited) that doesn't have a patch. I can't think of any security features or controls that wouldn't be easily testable. | |
| Nov 9 at 12:38 | comment | added | DannyNiu | @ThomasOwens 0-days? | |
| Nov 9 at 12:20 | comment | added | Thomas Owens♦ | What security features are not easily testable? | |
| Nov 9 at 8:26 | history | edited | DannyNiu | CC BY-SA 4.0 |
added 119 characters in body
|
| S Nov 9 at 8:22 | vote | accept | DannyNiu | ||
| Nov 9 at 7:57 | answer | added | freakish | timeline score: 15 | |
| Nov 9 at 7:46 | comment | added | freakish | "testing can be done locally on development computer" Sure. If you are the only developer working on a project. And your project is a calculator. And not a sophisticated one. | |
| Nov 9 at 6:25 | comment | added | Steve | @user1937198, ticking-timebomb scenarios more often influence people's minds in ways that lead to inferior behaviour overall. Not least here because it presents timebombs as an occasional fact of professional life where developers are expected to step in and heroically defuse. It does this when the setting of a ticking timebomb would usually be the result of their own criminal incompetence in the first place, and the most likely outcome is unforeseen detonation. | |
| S Nov 9 at 5:49 | vote | accept | DannyNiu | ||
| S Nov 9 at 8:22 | |||||
| Nov 9 at 5:48 | answer | added | Steve | timeline score: 4 | |
| Nov 9 at 5:37 | review | Close votes | |||
| Nov 15 at 3:05 | |||||
| Nov 9 at 5:31 | vote | accept | DannyNiu | ||
| S Nov 9 at 5:49 | |||||
| Nov 9 at 4:59 | comment | added | user1937198 | In a security critical environment, consider how important the ability to roll out patches for vulnerabilities fast is? And then consider, why can't you be that fast for all your releases, so you are practiced and confident when you do need to handle vulnerabilities. | |
| Nov 9 at 4:42 | answer | added | Telastyn | timeline score: 8 | |
| Nov 9 at 3:32 | history | asked | DannyNiu | CC BY-SA 4.0 |