Pipeline stages and dependencies Fail-fast pipeline design Idempotent pipeline jobs Immutable build artifacts Pipeline as code Reproducible builds Environment promotion Trunk-based delivery workflow

Push trigger Pull request trigger Tag-based release trigger Path-filtered execution Scheduled pipeline Manual dispatch inputs Commit SHA pinning Concurrency and superseded runs

Dependency cache key design Matrix testing Unit-test gate Integration test service container Lint gate Coverage threshold gate Dependency vulnerability gate SBOM generation

Semantic artifact versioning Artifact upload and download Container image build Multi-architecture container build Registry authentication Build provenance attestation Artifact signing Artifact retention policy

Secret injection OIDC cloud authentication Environment-scoped variables Preventing secret leakage in logs Secret rotation pipeline pattern Protected environment approval Configuration validation before deploy Least-privilege pipeline token

Rolling deployment Blue-green deployment Canary deployment Feature-flagged release Expand-contract database migration Readiness health check gate Automated rollback Post-deploy smoke tests

GitLab needs graph Jenkins declarative pipeline CircleCI workflow dependencies Azure DevOps staged pipeline Tekton Task and Pipeline Argo CD sync deployment Reusable workflow interface Pipeline template versioning

Retry with bounded backoff Job timeout Cancellation cleanup Deployment notification Pipeline duration metrics Structured pipeline logs Deployment audit record Pipeline incident postmortem evidence