CI/CD & DevOps
v1.0.0
Reviews CI/CD pipelines, deployment configuration, and dependency management — build caching, environment parity, rollback strategies, and supply chain security. Broken pipelines block every developer on the team; insecure pipelines can compromise production.
Security(4)
Pin Dependency Versions
Pin exact versions for all dependencies in production (no ^, ~, or * ranges). Unpinned dependencies silently pull in new versions that can introduce breaking changes, security vulnerabilities, or performance regressions — and you won't know until production breaks.
Architecture(10)
Run lint and tests on every PR and block merge on failure
Every pull request must run linting and the test suite, and merging must be blocked when they fail.
Build the artifact once and promote it across environments
Produce one immutable build artifact and promote that same artifact through staging to production.
Run database migrations as a controlled, gated step
Apply schema migrations through a dedicated, version-controlled, gated pipeline step — not ad hoc or implicitly on deploy.
Automate CI/CD & DevOps checks on every PR
BeforeMerge scans your pull requests against all 14 CI/CD & DevOps rules automatically. Get actionable feedback before code ships.