CI/CD Platform Engineering

A book-shaped table of contents for CI/CD platform engineering: pipeline foundations, build/artifact/delivery platforms, GitHub Actions end to end (workflow mechanics through enterprise governance), Argo Workflows, Tekton, Jenkins, release engineering, platform security, observability, reliability, enterprise governance, and MAANG interview preparation — cross-linking existing tech/kubernetes/platform-engineering-fundamentals/system-design notes instead of duplicating them.

7 — GitHub Actions: Authentication

Covers the GITHUB_TOKEN, fine-grained PATs, GitHub Apps, and OIDC federation to Azure, AWS, and GCP as the four authentication mechanisms available to a workflow.

9 — GitHub Actions: Secure Pipelines

Covers dependency review, CodeQL, secret scanning, artifact attestations, branch protection, required reviews, signed commits, and supply chain security gates enforced inside a workflow.

1 — Identity & Access Management

Covers identity and access management for a CI/CD platform — workload identity, human access, and the boundary between the two.

2 — Secret Management

Covers how a CI/CD platform stores, rotates, injects, and audits secrets used by pipelines and deployments.