Generate an SBOM in GitLab CI, sign the image digest with cosign, attach the SBOM as an attestation, and make Kyverno refuse anything unsigned. Plus an honest read of which SLSA level 3 requirements a GitLab runner meets.
Implement canary and blue-green deployments in Kubernetes with Argo Rollouts. Reduce deployment risk with progressive delivery.
Automate semantic versioning in GitLab CI using conventional commits. Generate changelogs and release tags automatically.
Complete guide to GitLab CI/CD for Kubernetes deployments. Build containers, scan for vulnerabilities, and deploy to clusters with GitOps.