CI/CD Platform Engineering

A book-shaped table of contents for CI/CD platform engineering: pipeline foundations, build/artifact/delivery platforms, GitHub Actions end to end (workflow mechanics through enterprise governance), Argo Workflows, Tekton, Jenkins, release engineering, platform security, observability, reliability, enterprise governance, and MAANG interview preparation — cross-linking existing tech/kubernetes/platform-engineering-fundamentals/system-design notes instead of duplicating them.

8 — GitHub Actions: Secrets Management

Covers repository, organization, and environment secrets and variables, secret rotation, and least-privilege scoping for CI credentials.

9 — GitHub Actions: Secure Pipelines

Covers dependency review, CodeQL, secret scanning, artifact attestations, branch protection, required reviews, signed commits, and supply chain security gates enforced inside a workflow.

1 — Identity & Access Management

Covers identity and access management for a CI/CD platform — workload identity, human access, and the boundary between the two.

2 — Secret Management

Covers how a CI/CD platform stores, rotates, injects, and audits secrets used by pipelines and deployments.