bongoDev

Loading...

Empowering technology learners worldwide with professional online live trainings. Transform your IT career with expert-led courses.

Facebook Instagram LinkedIn Github

Company

About Us
Careers
Blog
Events

Legal

Privacy Policy
Refund Policy
Terms and Conditions

Contact us

[email protected]
01757258398 01978367094 01576641348
01757258398

Our office

Flat 5/A, Shimanto Plaza, Plot #26/D, Main Road-03, Section #11, Mirpur, Dhaka 1216

© 2026 bongoDev. All rights reserved. | ই-ট্রেড লাইসেন্স: TRADEDNCC/015304/2024

Courses Job Success

Blog Events Free Assessment Login

bongoDev | GitHub Actions CI/CD Pro - Knowledge Hub

Knowledge Hub/GitHub Actions CI/CD Pro

Englishবাংলা

Learning path

GitHub Actions CI/CD Pro

Production CI/CD with GitHub Actions: workflow architecture, triggers, runners, expressions, permissions, artifacts, cache, matrices, reusable workflows, OIDC, Docker, Kubernetes, Terraform, supply-chain security, debugging and a final cheatsheet.

Discount price

৳ 320.00৳ 120.00Save ৳ 200.00

Lessons

33 published lessons · 1 free preview

01CI/CD Mental Model & GitHub Actions ArchitectureUnderstand continuous integration, continuous delivery/deployment, GitHub Actions components, run lifecycle, trust boundaries and the production delivery mindset.Beginner · 20 min readFree previewFree preview
02Workflow YAML Anatomy: name, on, permissions, env, jobs & stepsRead and write a GitHub Actions workflow from top to bottom and understand scope, indentation and the difference between run and uses.Beginner · 22 min readLockedLocked
03Events, Triggers, Branch/Tag Filters & Manual RunsControl when workflows run using push, pull_request, workflow_dispatch, schedule, workflow_run and precise branch/path filters.Intermediate · 24 min readLockedLocked
04Jobs, Steps, needs, Outputs & DAG DesignDesign workflows as dependency graphs, move data between steps/jobs, gate downstream work correctly and avoid accidental serialization.Intermediate · 25 min readLockedLocked
05Runners: GitHub-Hosted, Larger, Self-Hosted & ARCChoose and secure runner infrastructure, understand labels/groups, ephemeral execution, larger runners and Kubernetes autoscaling with ARC.Intermediate · 28 min readLockedLocked
06Shell Execution, defaults, Working Directories & Environment FilesControl shells and directories safely and use GITHUB_ENV, GITHUB_OUTPUT, GITHUB_PATH and GITHUB_STEP_SUMMARY correctly.Intermediate · 22 min readLockedLocked
07Contexts, Expressions, Variables & Conditional LogicUse GitHub contexts and expression syntax safely, understand evaluation timing and avoid injection-prone interpolation.Intermediate · 26 min readLockedLocked
08GITHUB_TOKEN, permissions, Secrets & Repository/Environment VariablesDesign least-privilege workflow identity, understand GITHUB_TOKEN scopes and choose repository, organization or environment secrets appropriately.Intermediate · 28 min readLockedLocked
09Dependency Setup, Toolchains & Cache DesignSet up runtimes reproducibly and design dependency caches that improve speed without becoming a security or correctness problem.Intermediate · 25 min readLockedLocked
10Artifacts, Reports, Retention & Promotion BoundariesUse workflow artifacts to move immutable outputs between jobs, retain test evidence and promote the same build across environments.Intermediate · 24 min readLockedLocked
11Matrix Builds, include/exclude & Cross-Platform TestingGenerate controlled job combinations for language versions, operating systems and deployment targets without duplicating workflow code.Intermediate · 24 min readLockedLocked
12Concurrency, Cancellation & Deployment SerializationPrevent duplicate work, serialize environment changes and design cancellation semantics for CI and deployment workflows.Intermediate · 22 min readLockedLocked
13Environments, Required Reviewers, Deployment Protection & SecretsUse GitHub environments as deployment boundaries with reviewers, branch restrictions, protection rules and environment-scoped secrets.Intermediate · 26 min readLockedLocked
14Reusable Workflows, workflow_call & Organization Golden PipelinesCentralize repeatable CI/CD policy with typed inputs, explicit secrets, outputs and reusable workflow versioning.Advanced · 30 min readLockedLocked
15Custom Actions: Composite, JavaScript & Docker ActionsChoose when to package automation as a composite, JavaScript or Docker action and design stable inputs, outputs and versioning.Advanced · 28 min readLockedLocked
16Service Containers & Integration-Test DependenciesRun databases, caches and supporting services for CI and understand health checks, networking and cleanup behavior.Intermediate · 24 min readLockedLocked
17Pull Request Security, Forks & pull_request_targetHandle untrusted pull requests safely and understand why privileged triggers, checkout behavior and secret access create major workflow risks.Advanced · 32 min readLockedLocked
18OIDC Federation: Short-Lived Cloud Authentication for AWS, Azure & GCPReplace long-lived cloud keys with GitHub OIDC federation, understand token claims, permissions, cloud trust policy and environment protection.Advanced · 34 min readLockedLocked
19Build & Test Pipeline Patterns: Fast Feedback to Release ConfidenceLayer linting, unit, integration and build jobs for fast feedback while preserving strong release confidence.Intermediate · 26 min readLockedLocked
20Docker Build, Buildx, Registry Push & Image MetadataBuild container images efficiently, tag by immutable identity, push to registries and preserve digest metadata for later deployment.Advanced · 30 min readLockedLocked
21Security Scanning: CodeQL, Dependency Review, Secrets & Container/IaC GatesIntegrate security checks into CI without turning every scanner into an unexamined blocking gate.Advanced · 30 min readLockedLocked
22Artifact Attestations, SBOM & Software Supply-Chain ProvenanceEstablish build provenance, generate/verify attestations and understand how SBOM evidence strengthens software supply-chain trust.Advanced · 28 min readLockedLocked
23Kubernetes Delivery: Manifests, Helm, Rollout Verification & RollbackDeploy immutable application versions to Kubernetes, authenticate safely and verify rollout instead of treating kubectl apply as success.Advanced · 32 min readLockedLocked
24Terraform CI/CD: fmt, validate, plan, Review, Apply & State SafetyBuild safe Terraform automation around reviewed plans, remote state, environment authorization, concurrency and OIDC authentication.Advanced · 34 min readLockedLocked
25Release Workflows: Tags, Semantic Versions, Changelogs & GitHub ReleasesTurn reviewed commits into traceable releases using tags, version metadata, immutable artifacts and GitHub Releases.Intermediate · 26 min readLockedLocked
26Monorepos, Path-Aware CI & Change-Based WorkflowsScale CI/CD for monorepos using path filters, job conditions, dependency graphs and explicit required-check design.Advanced · 28 min readLockedLocked
27Workflow Security Hardening: Action Pinning, Trust & PolicyTreat actions and reusable workflows as dependencies, pin critical automation, minimize permissions and use repository/organization policy to enforce controls.Advanced · 32 min readLockedLocked
28Self-Hosted Runner Hardening, Ephemeral Scale & ARC OperationsOperate self-hosted runner fleets safely with ephemeral execution, network boundaries, runner groups, autoscaling and Kubernetes ARC.Advanced · 34 min readLockedLocked
29Performance, Cost & Pipeline OptimizationReduce CI lead time and runner spend using DAG parallelism, cancellation, caching, artifact reuse, right-sized runners and measurement.Advanced · 28 min readLockedLocked
30Workflow Observability: Logs, Annotations, Summaries, gh run & APIMake workflow failures diagnosable using structured logs, annotations, job summaries, GitHub CLI, run metadata and retained diagnostics.Intermediate · 24 min readLockedLocked
31GitHub Actions Debugging & Troubleshooting PlaybookTroubleshoot workflows systematically across trigger, YAML, expressions, permissions, runner, cache, network, secrets, dependencies and deployment state.Advanced · 38 min readLockedLocked
32Production CI/CD Reference Architecture: PR → Build → Attest → DeployAssemble the concepts into a production-style pipeline with PR validation, immutable artifacts, OIDC, environments, deployment verification and provenance.Advanced · 38 min readLockedLocked
33GitHub Actions CI/CD Pro CheatsheetA practical reference for workflow syntax, events, contexts, runners, permissions, artifacts, matrices, OIDC, deployment, security and troubleshooting.Intermediate · 30 min readLockedLocked